cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Welcome to the Cisco Small Business Community

Have a question? Click on a topic board below to get started in the community.
Get the latest news in this issue of the Cisco Small Business Monthly Newsletter

DHCP relay on layer 2 switches

1272
Views
5
Helpful
9
Comments
Beginner

This may be a simple question so I hope someone can help.

 

We have several Cisco SG300\500 switches in L2 mode. Each switch has 8 VLANS and VLAN 1 is still native (For now). We do all routing between VLAN's on our firewall.

 

After reading several other posts, they were saying you don't need to set up DHCP relay and helper addresses on L2 switches. The firewall will do it all. Is this correct? If so why, and in what circumstance would I need DHCP relay\helpers on L2 switches.

 

All of my switches have 1 SVI on my management VLAN and the IP default-gateway set.

 

Any help is appreciated.

9 Comments
VIP Advisor

Hi @RussMcIntire 

 

DHCP request packets are broadcast packets, so they are broadcast throughout the broadcast domain (vlan).
This domain includes the interface that hosts the ip gateway of that domain (vlan).

If a DHCP server is found within the broadcast domain, then the DHCP server delivers addressing.
If the broadcast domain (vlan) does not have a DHCP server present in the domain, then the ip helper-address command is needed so that when the DHCP broadcast request packet reaches the interface, the device then changes the broadcast destination address to the unicast address indicated in the command.

In this way, the DHCP request packet can be routed out of the broadcast domain to the remote DHCP server.

 

Regards

Beginner

With that being said, I do not have a DHCP server on each VLAN so I would need the helper address for the VLAN without a DHCP server correct? 

VIP Advisor

HI @RussMcIntire 

 

query
Do you have a DHCP server or do you have the service configured on a network device?

 

Regards

Beginner

I have a 4 DHCP servers. 2 DHCP servers on VLAN 1 in fail over config. I also have 2 DHCP servers on VLAN 4 in fail over config. I am migrating all the DHCP scopes off of VLAN 1 to VLAN 4. I currently have DHCP helpers on all switches pointing to all 4 servers. I also have DHCP helpers on my firewall where I do the routing and I am fairly certain I do not need the helpers in both places.

 

Once DHCP is moved off of VLAN 1, Should I remove the helper addresses off of the switches and just leave them on the router to simplify things?

 

I really only want the helpers in 1 spot.

VIP Mentor

Once you migrated the Scopes to VLAN4 DHCP Servers, Hope you are not removing VLAN1 - by saying that if you not removing VLAN 1, then  you need to remove OLD DHCP Server and Add new DHCP Servers to VLAN 1 -same like VLAN4 Servers, so users in VLAN 1 get IP address from new DHCP Servers.

Beginner

My plan is to remove all devices off of VLAN 1, remove the DHCP servers from VLAN 1, and decommission VLAN 1 completely. IE VLAN's 2-9 with DHCP servers only on VLAN 4. SO with this said, can I just keep the helpers on the firewall and remove them from the switches? 

Beginner

I removed the DHCP helpers from all my switches because I discovered the SG series DHCP helpers were not always forwarding as they should. Once I removed the helpers from the switches and added them to the firewall, everything works just great.

 

I appreciate all the help.

VIP Mentor

Glad all working as expected, we should mark this as solution, if no further assistance required here.

Beginner

Yes, this can be marked as a solution though my browser will not let me.