cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3038
Views
5
Helpful
2
Replies

DHCP request not being forwarded by helper address SAME vrf 6500

Nick Cutting
Level 1
Level 1

Version 12.2(33)SXI

int vlan 1

description client vlan

ip vrf forwarding A

ip address 10.1.1.1 255.255.255.0

standby 129 ip 10.1.1.2

standby 129 timers 1 4

standby 129 priority 105

standby 129 preempt

ip helper-address 10.1.2.20

int vlan 2

description dhcp_server vlan

ip vrf forwarding A

ip address 10.1.2.1 255.255.255.0

standby 129 ip 10.1.2.2

standby 129 timers 1 4

standby 129 priority 105

standby 129 preempt

dhcp requests are not making it to the dhcp server SAME VRF (ip helper-addres is not doing anything.....)

extended vrf traceroutes on udp 67 sourced from vlan2 are fine

I am expecting udp unicast packets on port 67 "giaddr" relay packets on the DHCP server generated and sourced by the relay on Vlan1

eg. Mar  1 01:59:06.731: DHCPD: setting giaddr to 10.1.1.1

This exact setup works in our preprod environment with the same code.

Only difference is we run Distributed etherchannel on the 6500's where this doesnt work.

Wireshark on the client I can see the requests being sent

Going to check it with debug ip dhcp server to check the relay logs out of production hours.

I have seen so many people say it IS and ISN'T supported on this version of the code.

e.g.

https://supportforums.cisco.com/thread/2042223

I am aware the helper-adddress should inherit the vrf of the interface

ip helper-address vrf command is not supported.

The fact it works in the PP environment.... could this be due to the Distributed EtherChanel difference? or just some bug....

any ideas?

2 Replies 2

Nick Cutting
Level 1
Level 1

This a working configuration on a 6500 hsrp pair not runnning DEC

from debug dhcp server packet, exact same config.....

Feb 23 10:29:22.819: DHCPD: setting giaddr to 10.1.1.1.

Feb 23 10:29:22.819: DHCPD: BOOTREQUEST from 0063.6973.636f.2d37.3038.312e.3035.6638.2e33.3633.662d.566c.3131.34 forwarded to 10.1.1.1.

Feb 23 10:29:25.819: DHCPD: setting giaddr to 10.1.1.1.

Feb 23 10:29:25.819: DHCPD: BOOTREQUEST from 0063.6973.636f.2d37.3038.312e.3035.6638.2e33.3633.662d.566c.3131.34 forwarded to 10.1.1.1.

.

Solved,

Some security consious cowboy had added "no service dhcp" to these switches.  This is needed for helper address to work

"sh ip sockets" was also useful here