Configuring DHCP Reservations for VPN users terminating on ASA 5540

[Sami Abunasser]

Hi,

I have an ASA 5540 cluster that is configured as my remote access VPN point. Users connect using IPSEC Profiles with Cert based authentication, the profile is configured to query two DHCP servers (infoblox appliance servers).

The problem I am encountering, is that I need to make reservations on the DHCP server for some users for specific business needs. What happens is that the ASA passes the request to the DHCP server with it's own MAC address and not the MAC of the remote host.

Is there any way I can configure the ASA to pass the request using the hosts actual MAC address?

Thanks,

Sami

[padatta]

Hi,

This feature is yet to be made available. This request is being tracked via the following:

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsr53828

Paps

[tarner]

What is the solution for CSCsr53828 ? Or what is the workaround? My company has purchased 2 ASA 5525-x machines to run remote client vpn services. We would like use the mac address of the client?  Is there a remote DHCP workaround? What is the workaround to use IOS or a VPN concentrator ? 

[arnert]

We would like to know the solution to this MAC reservation issue? Federal Gov. and compliance network scenarios require this. This is related to this bug also. https://bst.cloudapps.cisco.com/bugsearch/bug/CSCsw72963/?referring_site=bugquickviewredir

My company has purchased 2 ASA 5525-x machines to run remote client vpn services.  We should be able set this. Posted by Jay Johnston Cisco 4 years ago

This functionality is currently not supported on the ASA. There is no known way to implement this functionality (The static ARP idea doesn't work, I just tried it in the lab).

An enhancement bug has been filed requesting this support:

CSCsw72963 ASA local address pools should support DHCP reservations/assignments