cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
527
Views
0
Helpful
3
Replies

Good old DHCP options

Rory Hamaker
Level 1
Level 1

Guys and gals, I know this question has probably been posted a hundred times, but I have scoured and cannot manage to find a solution that fixes my issue.  I am running a windows DHCP server (ip x.x.1.1) that needs to talk to a pxe server (ip x.x.1.78), both servers are in vlan 6.  The systems I am building are on vlan 9 and have an address of x.x.9.x.  The suspected result happens, if I move the build systems to the server vlan all works well but in their respective vlan (of 9) the dhcp request times out.  I do have access-lists setup and I have the dhcp-server option set to x.x.1.1.  See below for some of the pertinant information you might be able to use:

vlan 9 configuration:

interface Vlan9

ip address 192.168.9.1 255.255.255.0

ip access-group 109 in

ip helper-address 192.168.1.1    (DHCP SERVER)

ip helper-address 192.168.1.78   (PXE SERVER)

end

vlan 9 access list:

Extended IP access list 109

    10 permit ip 192.168.9.0 0.0.0.255 192.168.1.0 0.0.0.255 (1 match)

    20 permit udp any 192.168.1.0 0.0.0.255 eq bootps

    30 permit udp any host 255.255.255.255 eq bootps (14 matches)

    40 permit ip 192.168.9.0 0.0.0.255 192.168.50.0 0.0.0.255

    50 permit ip 192.168.9.0 0.0.0.255 192.168.15.0 0.0.0.255

The access list is just to keep traffic from 9 from getting to any other systems except servers.

Hopefully this will help and it is something easy I am overlooking.  As always your help is greatly appreciated.

1 Accepted Solution

Accepted Solutions

alessandro.s
Level 1
Level 1

Hi Rory,

try to add line "permit udp any 192.168.1.0 0.0.0.255 eq bootpc to access-list 109

Regards

View solution in original post

3 Replies 3

Rory Hamaker
Level 1
Level 1

Not sure if this is helpful or not but also here is the list of options configured on the DHCP server.

alessandro.s
Level 1
Level 1

Hi Rory,

try to add line "permit udp any 192.168.1.0 0.0.0.255 eq bootpc to access-list 109

Regards

That was it, thanks for that simple solution.  Feel a little foolish for not catching that one, haha.