PIX 501 DHCP command failed

[Marco Grazioli]

Trying to set Outside inteface to DHCP with commend:

ip address outside dhcp setroute

And receive this error:

DHCP command failed

This problem also during the config factory-default procedure.

The Firmware is

Cisco PIX Firewall Version 6.3(5)

Cisco PIX Device Manager Version 3.0(4)

Hardware:   PIX-501, 16 MB RAM, CPU Am5x86 133 MHz

Flash E28F640J3 @ 0x3000000, 8MB

BIOS Flash E28F640J3 @ 0xfffd8000, 128KB

0: ethernet0: address is 000f.f7de.bc4d, irq 9

1: ethernet1: address is 000f.f7de.bc4e, irq 10

Licensed Features:

Failover:                    Disabled

VPN-DES:                     Enabled

VPN-3DES-AES:                Enabled

Maximum Physical Interfaces: 2

Maximum Interfaces:          2

Cut-through Proxy:           Enabled

Guards:                      Enabled

URL-filtering:               Enabled

Inside Hosts:                50

Throughput:                  Unlimited

IKE peers:                   10

This PIX has a Restricted (R) license.

Serial Number: 808140994 (0x302b40c2)

Running Activation Key: 0x2b91a0ab 0xb8e6ab00 0xbe0d66a8 0x28502721

Configuration last modified by enable_15 at 01:47:39.871 UTC Fri Jan 1 1993

What I should do?

Tks for your help

[cadet alain]

Hi,

Is this a typo ?

This should be ip address outside dhcp setroute

Regards

Alain

Don't forget to rate helpful posts.

[Marco Grazioli]

I mistake writing the post....

In Console I wrote correctly

ip address outside dhcp setroute

Please note that during config factory-default command, the Pix give me back dhcp command failed, exactly the same error message.

[cadet alain]

Can you post sh nameif output

Regards

Alain

Don't forget to rate helpful posts.

[Marco Grazioli]

pixfirewall(config)# sh interface                                

interface ethernet0 "outside" is up, line protocol is down                                                         

  Hardware is i82559 ethernet, address is 000f.f7de.bc4d                       

  MTU 1500 bytes, BW 10000 Kbit half duplex

        0 packets input, 0 bytes, 0 no buffer

        Received 0 broadcasts, 0 runts, 0 giants

        0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

        9 packets output, 5310 bytes, 0 underruns

        0 output errors, 0 collisions, 0 interface resets

        0 babbles, 0 late collisions, 0 deferred

        9 lost carrier, 0 no carrier

        input queue (curr/max blocks): hardware (128/128) software (0/0)

        output queue (curr/max blocks): hardware (0/1) software (0/1)

interface ethernet1 "inside" is up, line protocol is up

  Hardware is i82559 ethernet, address is 000f.f7de.bc4e

  IP address 192.168.1.1, subnet mask 255.255.255.0

  MTU 1500 bytes, BW 100000 Kbit full duplex

        0 packets input, 0 bytes, 0 no buffer

        Received 0 broadcasts, 0 runts, 0 giants

        0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

        1 packets output, 60 bytes, 0 underruns

        0 output errors, 0 collisions, 0 interface resets

        0 babbles, 0 late collisions, 0 deferred

        0 lost carrier, 0 no carrier

        input queue (curr/max blocks): hardware (128/128) software (0/0)

        output queue (curr/max blocks): hardware (0/1) software (0/1)

[cadet alain]

Hi,

interface ethernet0 "outside" is up, line protocol is down  

What is connected to outside interface ?

Regards

Alain

Don't forget to rate helpful posts.

[Marco Grazioli]

Nothing....i'm trying to make first setup...

Tks for your patience..

[Jon Marshall · Accepted solution]

Marco

As Alain has pointed out the outside interface is down. So how would it get a DHCP address ? For DHCP to work there must be a device on the same subnet as the outside interface that is acting as DHCP server to give the pix an address.

But if your interface is down how could your firewall possibly talk to the DHCP server.

Do you know if your ISP you are connecting to supports DHCP ?

Note whether they do or don't nothing will work until you connect the outside interface.

Jon

[Marco Grazioli]

Great Jon,

the error during config factory-default put me outside right road.

With a DCHP server connected, now I don't receive more error.

I was trying to make a standard scratch configuration, without anything connected, and this was my error...!!

Now I know...!!

Thks a lot...

[qing2220871119 · Accepted solution]

Marco:

         you must be connect  ISP for your outside port.then DHCP can work.you can try again.

   when  the line protocol is up ,that you can configuration "ip address outside dhcp setroute"