DHCP over site to site VPN with ASA

[jkay18041]

Hello, I have a site to site vpn tunnel setup between two asa 5515x units. Behind site A is a Windows server running DHCP. I've created the scope on it.

On site B i've got the ASA configured with the following commands

SiteB(config)# dhcprelay server 10.16.1.10 outside

SiteB(config)# dhcp relay enabled inside

Do I need to add any firewall rules to allow this to work? I believe all my site to site traffic bypasses my firewall rules anyways.

Thank you

[Georg Pauwen · Accepted solution]

Hello,

I think it depends on which software release you are running. Have a look at the document below:

https://therealuntouchables.wordpress.com/2016/02/02/cisco-asa-configuring-dhcp-relay-across-a-site-to-site-vpn/#:~:text=The%20DHCP%20relay%20packet%20forwards,ACL%20so%20it%20is%20encrypted.