Firewall config to allow comunication for DHCP server

[suryakant.chavan]

Hi Expert,

We have DHCP server which is placed at inside to our network. Now the problem we are facing is PC's are not able to get ip's from dhcp srever. As I checked configuration on Layer 3 switch is ok i.e we have added dhcp server ip in ip helper address command plcaed under SVI interface. But I am suspecting issue with firewall configuration. Can anyone please send me the configuration that should be on firewall.

Thank in advance.

Regards,

Surya

[mvsheik123]

PIX/ASA is in between the client and DHCP server. If so, check this link..

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008075fcfb.shtml

Thx

MS

[suryakant.chavan]

Hi MS,

Appreciate prompt reply.

I want some more explanation , if i am putting acl on my SVI interface of Layer three switch , which is used as default gateway for pc.

Which ports should i open & what source i should mention in extended acl

Regards,

Surya

[Julio Carvajal]

Hello,

All you need is the IP helper command on the layer 3 switch, now on the ASA you do not need any access-list to allow the DHCP request from the clients and comming from the server.

Are the users able to ping the ASA interface??

Can you share the DHCP configuration on the ASA?

Can you share the Layer 3 switch changes you have made to allow this communication?

Please rate helpfull post,

Regards,

Julio