Firewall and DHCP

[JAYESH RAMAIYA]

Hi

We have a Cisco 5505 ASA fireawll at a remote site.

I can get the firewall to issue the IP addresses to the pc's, Is there a way for the pc's to get their IP addresses directly from our DHCP server?

Regards

Jay

[mvsheik123]

Hi Jayesh,

We need more information on how and where the DHCP server is located. Here are couple of scenarios..

1. DHCP server and PCs are located inside the network - then nothing to do on ASA. You need to do necessary config on L3 switch inside (if there is any).

2. DHCP server and PCs are on different segments of ASA or at remote L2L vpn tunnel end. You need to configure ASA as DHCP relay agent.Check the below links.

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008075fcfb.shtml

https://supportforums.cisco.com/community/netpro/security/firewall/blog/2011/01/07/asa-pix-dhcp-relay-through-vpn-tunnel

hth

MS

[JAYESH RAMAIYA]

Hi

Thanks for the reply.

We have 10 pc's and an ASA in a remote office.

The DHCP server is located at our head office which is about 3 miles away. We want the pc's to pick up the IP addresses from the DHCP server.

I have read that EZVPN is an easy tool that can be used for this type of scenerio

Regards

Jay

[mvsheik123]

May be.. iam not sure about that. I have easyVPN setup with local ASA acting as DHCP server for internal cleints but not central DHCP server. Lets see if experts confirm on this.

Thx

MS