Router/Switch after Firewall

[ISSM]

Hello,

My current setup that's working is ISP > Firewall (DHCP Server/NAT/ACL) > Switch > Computers.

I want to put a Router between the Firewall and Switch even though I know it's not needed, but we paid for it.

Firewall "Inside" > Router's G0/0/0 and G0/0/1 to Switch.  Router and Switch are open with no configuration.

All computers gets an IP address, but no access to the internet.  On router, I did an ip route 0.0.0.0 0.0.0.0 192.160.0.1 (Firewall Gateway IP).

What am I doing wrong?

[MHM Cisco World]

the SW is L2 it normal not show IP assign to client. 
the SW L2 show only MAC address 

[ISSM]

Sorry, I meant the router is not showing any IP addresses assigned.  Client on switch is stating can't contact dhcp server.

Do I need to run command on Int G/0/0/1 on router - Switchport access Direct-Internet, which is the name of my DHCP pool?

[M02@rt37]

OK @ISSM 

Does the client have an ip add?

For the switch it's a normal situation as explained @MHM Cisco World 

[ISSM]

Client does not get an ip address because it said it can't contact DHCP server.  I will try to export router config and post it here.

[MHM Cisco World]

as I mention before check the reachability. 
the client NOT connect to DHCP server 
the client send broadcast, the router receive this broadcast and convert it to unicast and send it to ASA (DHCP server)
the ASA must have route to LAN to make it reply to DHCP request (from router)

[ISSM]

CISP.Router#show run

Building configuration...

Current configuration : 6755 bytes

!

! Last configuration change at 15:37:01 UTC Mon May 22 2023

!

version 17.6

service timestamps debug datetime msec

service timestamps log datetime msec

! Call-home is enabled by Smart-Licensing.

service call-home

platform qfp utilization monitor load 80

platform punt-keepalive disable-kernel-core

!

hostname xxx

!

boot-start-marker

boot-end-marker

!

!

enable secret xxx

enable password!

no aaa new-model

 --More--

*May 22 15:37:01.917: %SYS-5-CONFIG_I: Configured from console !        e

!

!

!

!

!

!

ip dhcp bootp ignore

no ip dhcp conflict logging

ip dhcp excluded-address 192.168.0.0 192.168.0.5

ip dhcp excluded-address 192.168.0.245 192.168.0.255

!

ip dhcp pool Direct-Internet

 network 192.168.0.0 255.255.255.0

 default-router 192.168.0.1

 dns-server 192.168.0.254 192.168.0.253

!

!

!

login on-success log

!

!

!

!

subscriber templating

multilink bundle-name authenticated

!

!

!

crypto pki trustpoint TP-self-signed-xxx

 enrollment selfsigned

 subject-name cn=IOS-Self-Signed-Certificate-xxx

 revocation-check none

 rsakeypair TP-self-signed-xxx

!

crypto pki trustpoint SLA-TrustPoint

 enrollment pkcs12

 revocation-check crl

license udi pid C8300-1N1S-4T2X sn

memory free low-watermark processor 67522

!

diagnostic bootup level minimal

!

spanning-tree extend system-id

!

username

username xxx privilege 15 secret xxx

!

redundancy

 mode none

!

!

!

!

!

!

!

!

interface GigabitEthernet0/0/0

 ip address 192.168.0.250 255.255.255.0

 negotiation auto

!

interface GigabitEthernet0/0/1

 no ip address

 negotiation auto

!

interface GigabitEthernet0/0/2

 no ip address

 shutdown

 negotiation auto

!

interface GigabitEthernet0/0/3

 no ip address

 shutdown

 negotiation auto

!

interface TenGigabitEthernet0/0/4

 no ip address

 shutdown

 negotiation auto

!

interface TenGigabitEthernet0/0/5

 no ip address

 shutdown

 negotiation auto

!

ip http server

ip http authentication local

ip http secure-server

ip forward-protocol nd

ip route 0.0.0.0 0.0.0.0 192.168.0.2

!

!

!

[MHM Cisco World]

ip dhcp pool Direct-Internet

 network 192.168.0.0 255.255.255.0

 default-router 192.168.0.1

 dns-server 192.168.0.254 192.168.0.253

the router is the DHCP server for client not the ASA ? 
if Yes then you need only one interface with IP 192.168.0.1 <<- 

NOTE:- no need ip helper 

[ISSM]

I moved the DHCP server to router from ASA.  FIrewall's IP is now 192.168.0.2 and Router is 192.168.0.1.

[MHM Cisco World]

I will share the topology with IP need 

[MHM Cisco World]

can you re-share the config here

[ISSM]

Attached.

[Rich R]

> FIrewall's IP is now 192.168.0.2 and Router is 192.168.0.1
That can only work if you use bridging between the router and firewall.  This is using the router as a switch or bridge not as a router!
If you want to use the router as a router then they need to be on different subnets.
If you set up bridging (or use switchports) to do that with them in the same subnet then you'll need to set the default gateway to be the firewall 192.168.0.2.

What model of router are you using?
Share the config so we can see what you've configured? (attach as text file - don't paste here)

[M02@rt37]

It's a pitty to not use a router for what is doing so well.

"If you want to use the router as a router then they need to be on different subnets" +1

[ISSM]

Please see attached for my router configt.  It's a Cisco C8300 router.

[MHM Cisco World]