02-22-2013 09:26 AM - edited 03-07-2019 11:53 AM
Version 12.2(33)SXI
int vlan 1
description client vlan
ip vrf forwarding A
ip address 10.1.1.1 255.255.255.0
standby 129 ip 10.1.1.2
standby 129 timers 1 4
standby 129 priority 105
standby 129 preempt
ip helper-address 10.1.2.20
int vlan 2
description dhcp_server vlan
ip vrf forwarding A
ip address 10.1.2.1 255.255.255.0
standby 129 ip 10.1.2.2
standby 129 timers 1 4
standby 129 priority 105
standby 129 preempt
dhcp requests are not making it to the dhcp server SAME VRF (ip helper-addres is not doing anything.....)
extended vrf traceroutes on udp 67 sourced from vlan2 are fine
I am expecting udp unicast packets on port 67 "giaddr" relay packets on the DHCP server generated and sourced by the relay on Vlan1
eg. Mar 1 01:59:06.731: DHCPD: setting giaddr to 10.1.1.1
This exact setup works in our preprod environment with the same code.
Only difference is we run Distributed etherchannel on the 6500's where this doesnt work.
Wireshark on the client I can see the requests being sent
Going to check it with debug ip dhcp server to check the relay logs out of production hours.
I have seen so many people say it IS and ISN'T supported on this version of the code.
e.g.
https://supportforums.cisco.com/thread/2042223
I am aware the helper-adddress should inherit the vrf of the interface
ip helper-address vrf command is not supported.
The fact it works in the PP environment.... could this be due to the Distributed EtherChanel difference? or just some bug....
any ideas?
02-23-2013 02:52 AM
This a working configuration on a 6500 hsrp pair not runnning DEC
from debug dhcp server packet, exact same config.....
Feb 23 10:29:22.819: DHCPD: setting giaddr to 10.1.1.1.
Feb 23 10:29:22.819: DHCPD: BOOTREQUEST from 0063.6973.636f.2d37.3038.312e.3035.6638.2e33.3633.662d.566c.3131.34 forwarded to 10.1.1.1.
Feb 23 10:29:25.819: DHCPD: setting giaddr to 10.1.1.1.
Feb 23 10:29:25.819: DHCPD: BOOTREQUEST from 0063.6973.636f.2d37.3038.312e.3035.6638.2e33.3633.662d.566c.3131.34 forwarded to 10.1.1.1.
.
02-26-2013 12:56 AM
Solved,
Some security consious cowboy had added "no service dhcp" to these switches. This is needed for helper address to work
"sh ip sockets" was also useful here
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide