Dear Experts,
Logs of my 887 get filled with dhcp restart messages every two hours:
May 16 15:08:34: %DHCP-5-RESTART: Interface ATM0.1 is being restarted by DHCP
.May 16 15:08:44: %DHCP-6-ADDRESS_ASSIGN: Interface ATM0.1 assigned DHCP address xx.xxx.xxx.xxx, mask 255.255.248.0, hostname
I found from previous messages that adding rule to have udp 68 to ATM0.1 solved the issue:
ip nat inside source static udp 192.168.1.1 68 interface ATM0.1 68
But this doesn't help, I still get the messages. Also I've tried to add rules like:
class-map type inspect match-all DHCP_QUERY
match protocol udp
match access-group 101
policy-map type inspect Internet_to_Trusted
class type inspect DHCP_QUERY
inspect
class class-default
drop log
zone-pair security Internet_to_Trusted source Internet destination Trusted
service-policy type inspect Internet_to_Trusted
ip nat inside source static udp 192.168.1.1 68 interface ATM0.1 68
access-list 101 permit udp any any eq bootpc
access-list 101 permit udp any any eq bootps
ATM0.1 is like following:
interface ATM0.1 point-to-point
description Outside WAN
ip address dhcp
ip nat outside
ip virtual-reassembly in
zone-member security Internet
atm route-bridged ip
pvc 0/100
encapsulation aal5snap
And following sh for dhcp give:
887#show dhcp server
DHCP server: ANY (255.255.255.255)
Leases: 266
Offers: 133 Requests: 398 Acks : 133 Naks: 0
Declines: 0 Releases: 0 Query: 0 Bad: 0
Forcerenews: 0 Failures: 0
DNS0: xxx.xxx.xxx.xxx, DNS1: xx.xx.xx.xx
Subnet: 255.255.248.0 DNS Domain: xxxx
887#show dhcp lease
Temp IP addr: xx.xxx.xxx.xx for peer on Interface: ATM0.1
Temp sub net mask: 255.255.248.0
DHCP Lease server: xxx.xxx.xx.xx, state: 7 Renewing
DHCP transaction id: 2BF
Lease: 7200 secs, Renewal: 3600 secs, Rebind: 6300 secs
Temp default-gateway addr: xx.xxx.xxx.x
Next timer fires after: 00:34:38
Retry count: 1 Client-ID:
Client-ID hex dump:
Hostname: 887
I don't find dropped packets from log for 68 or 67 udp port. How can I troubleshoot this that is my router able to renew the IP address from ISP correctly? Despite of these messages, ip address stays the same. Your help is greatly appreciated.
