DHCP accross VPN 3030 to 1751 via DSL

[martin.law]

I have a VPN 3030 concentrator and a number of 1751 routers connected accros a DSL network. The VPNs are IPSec 3DES LAN-to-LAN.

I am having problems getting DHCP to pass accross the link. The 1751s are configured with the right "ip helper-address", i.e. that of the DHCP server. The DHCP server sits on the internal interface of the 3030. The 1751 ethernet port is configured with the correct fixed IP address.

When running DHCP debugs on the 1751 I get the following:

09:13:33: DHCPD: setting giaddr to 10.248.130.222.

09:13:33: DHCPD: BOOTREQUEST from 0100.0086.33d5.75 forwarded to

192.168.80.1.

09:13:33: DHCPD: BOOTREQUEST from 0100.0086.33d5.75 forwarded to

192.168.91.253.

09:13:33: DHCPD: cannot load local addresses for Virtual-Access1.

The 3030 is configured with the correct DHCP server IP address.

The 1751 is running IOS 12.2(2)XK2.

The 3030 is running 3.5.Rel Nov 27 2001

[cjacinto]

This is not currently supported on a lan to lan tunnel btwn ios and 3030. The only plan for this kind of functionality (dhcp relay) being planned is on the 3000 concentrator to a 3002 hardware client, on the 3.6 code.

[martin.law]

A TAC engineer has just stated that it should be possible. Do you have anything that backs up your statement.

Thanks.

[bhp]

The DHCP relay functionality 3000 ->> 3002 has not been implemented in the 3.6 code.

What are the plans for this functionality?

[jerry.roy]

Can you supply a config for the 3002 to 3030?

Thanks,

Jerry Roy

[jerry.roy]

Did you ever get DHCP relay to work between a 3030 and a 1700 series router?

BTW - I am on the 3000 concentrator Version 4.0 beta and have spoken to the Design Engineer. There are NO PLANS for DHCP Relay on the 3002. What a waste of Valuable time.

[bhp]

Can I get this verified by Cisco - Are there no plans for DHCP relay on the 3002 Hardware Client ???

I can see that it has just been implemented in the PIX 6.3 code - But our customer has already bought 50 3002 models and can't just change.

[mattcooling]

I've got exactly the same problem as this, running a 3005 concentrator (4.0.1) and an 837 router (12.2(8)YN).

Did you manage to find a resolution, or get confirmation that it is/isn't possible?

Thanks,

Matt