cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2052
Views
0
Helpful
2
Replies

DHCP Relay to Windows server

Tim-Saunders
Level 1
Level 1

From my ISP, my connection goes to an ASA-5505 and then on to my UC540.  Behind the UC540 is a Windows server running DHCP.  I want VPN users that connect to the ASA-5505 to get IP addresses from the Windows server.

I had this working last week after a few hours of digging and for some reason, it isn't working now.  (I think I did a "copy start run" on the UC540)

The ASA is reporting "Cannot obtain an IP address for remote peer"

What do I need to do on each device to make this work for an IPSEC VPN?

Thanks in advance!

ASA-5505

>> Related commands

group-policy RemoteAccess_Group attributes
dhcp-network-scope 192.168.9.0
tunnel-group RemoteAccess_Group general-attributes
authentication-server-group WindowsIAS
default-group-policy RemoteAccess_Group
dhcp-server 192.168.9.1
no vpn-addr-assign aaa
no vpn-addr-assign local

UC540

>> Related commands

ip dhcp relay information trust-all

2 Replies 2

wichilds
Level 4
Level 4

Tim,

If you performed a copy start run then you copied your startup config OVER your running config. I hope you did not save anything after that. Try rebooting to semi-recover your UC540, and then run a ping test from the ASA to the DHCP server. If that does not work, then check that your ip routing is still good and that your firewall/NAT settings are removed from the UC.

If the ASA cannot get to the server (I suspect this to be true) then make sure you are not blocking traffic through the 540. I would be willing to bet that the copy start run is what hosed up your configuration. Use CCA to delete the NAT rules and firewall settings. Please report your findings.

Bill

Thanks Bill.

Thankfully, I didn't lose the entire config for the two devices.  I just lost the changes to the DHCP relay settings.

I have the UC540 setup with the firewall and NAT disabled.  The ASA has static routes for the IP ranges that are on the inside of the UC540.

Pings from the ASA were successful to the DHCP server.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: