I am finding it difficult to suggest my management for replacing the present Netscreen firewall which ASA as it does the static dhcp ip to mac-address mapping.
Is there any facility where ASA does static DHCP IP to Mac-address reservation in ASA.
I have seen some notes on cisco which states the utilisation of option 61 to specify the client identifier as we do in Cisco routers How can I use this in ASA with DHCPD option.
Can anyone help me doing this and send me a sample configuration if this can be done using ASA.
Solved! Go to Solution.
Staying tuned is all fine and good for those who aren't trying to operate a business. I just had my business partner shell out for three ASAs thinking they'd be adequate, now I find out I can't reserve IPs. Any update?
Adding a static ARP entry actually creates an issue as the ASA will not be able to reserve the IP. When the ASA assigns the supposedly reserved IP address to another device, you will end up with ARP collision.
Received ARP request collision from 192.168.5.6/aaaa.aaaa.aaaa on interface Inside with existing ARP entry 192.168.5.6/xxxx.xxxx.xxxx
Static ARP didn't work on my ASA 5505 with asa924-20-k8.bin (9.2(4)20) even though the command was entered, shows in config, and reboot performed... No success.
This person said he did Static ARP on his 5505 with command alias at the end.
I tried this, cleared ARP, rebooted... No success.
This does look like a bug/flaw on at least the 5505. Online documentations shows it as a feature and ASDM leads you to believe it works as well.
I guess one way to implement the Static ARP / DHCP Reservation on a device where it does work and configure DHCP Relay (if that works!) on the ASA. The feature is available even on old Linksys Wirless G routers that came out in 2003... this does not make you look good Cisco!
The fact that this has not yet been addressed by Cisco, or even replied to, is truly pathetic.
DHCP reservation is a simple feature and something that should have been supported out of the box.
Can someone from Cisco please update as to why this is not included? I can only assume that some internal decision has been made not to support this feature, and customers are not being told.
Agreed. It is disheartening that this issue has been ignored for so long. The smaller ASA 5505/5506 line is great for small remote offices (that might not even have other DHCP services available) so to not have this feature available when other garbage soho gateways you can get at Best Buy are able to do this is beyond me.
With ASA on the chopping block for FTD code now, it's doubtful we'll ever get this functionality, which is a huge bummer because I still see 5505/06 boxes all over the place and this would be extremely useful when setting a static IP is sometimes a dangerous (from a remote support perspective) thing to do in a branch office location.