DHCP not recieved by host

[arun.stha]

L3 Switch as dhcp:

ip dhcp pool wifi_pool_1

   network 192.168.10.0 255.255.255.0

   default-router 192.168.10.1

   dns-server 192.168.0.180

ip access-list extended LAN_ONLY

permit ip 192.168.10.0 0.0.0.255 192.168.0.0 0.0.255.255

interface Vlan20

ip address 192.168.10.1 255.255.255.0

I want to block internet to  host connected to AP and only permit the internal network, my internal network are in range of 192.168.0.0/16, ACL was created as above, but the host that connects to AP arent able to obtain ip address provided by DHCP.

IP is obtain by host if i put ace as "permit ip any any"  but this is not my requirement because this leads host to access internet also.

[cadet alain]

Hi,

Do this:

ip access-list extended LAN_ONLY

permit udp any eq bootpc  host 255.255.255.255 eq bootps

permit udp any eq bootpc  host 192.168.10.1 eq bootps

permit ip 192.168.10.0 0.0.0.255 192.168.0.0 0.0.255.255

Regards.

Alain

Don't forget to rate helpful posts.

[Karsten Iwen · Accepted solution]

you could add the following line to your ACL to generally allow DHCP-traffic:

permit udp any eq bootpc any eq bootps

It could be more specific but this line is quite often used for that task.

EDIT: Cadets Solution is more specific and though better then mine ... ;-)

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

[arun.stha]

Thank you, cadet and Karsten both of u, It worked well.