PIX 501 dhcp bind mac-address

[Steffen Frederiksen]

Hi guys

I use the dhcp demon (dhcp server) on my PIX 501 to give my local clients automatic ip addresses, my dhcpd config is here:

dhcpd address 192.168.251.20-192.168.251.40 inside

dhcpd dns 8.8.8.8 8.8.4.4

dhcpd lease 3600

dhcpd ping_timeout 750

dhcpd domain lokalnet

dhcpd enable inside

I wanna now if it possible to make a static lease on pix dhcpd.. So a client with a specific mac address olways obtain the same ip address whitin the dhcp scoope that the pix 501 i serving.. If yes, please proviode me with a config example :-)

Thanks and best regards,

Steffen, Denmark.

[PAUL GILBERT ARIAS · Accepted solution]

It is not possible my friend. Here are the option for the command "dhcpd":

http://www.cisco.com/en/US/docs/security/pix/pix63/command/reference/df.html#wp1025497

[Steffen Frederiksen]

damned .. :)

While i have your attention:

My outside interface is obtain ip from my isp dhcp..

if i want to port forward port 51234 to a local host with ip 192.168.251.20 and also make a permit in an access-list.. can you proviode me with a config examble :)

[PAUL GILBERT ARIAS]

you can use the following:

static (inside,outside) tcp interface 51234  192.168.251.20  51234

access-l outside_in permit tcp any interface outside eq 51234

access-group outside_in in interface outside

That should redirect the traffic that gets to the IP of the outside interface on port 51234 to the internal IP 192.168.251.20

That should help you.

Here is the command static:

http://www.cisco.com/en/US/docs/security/pix/pix63/command/reference/s.html#wp1026694

Here is for the access-list:

http://www.cisco.com/en/US/docs/security/pix/pix63/command/reference/ab.html#wp1067755

[PAUL GILBERT ARIAS]

is everything clear now?

If things are fine please mark the question as answered.

[Steffen Frederiksen]

Sorry Paul. This all is fine.

Thank you for your help indeed!