PXE Boot Server over a PIX Firewall

chris.southern · ‎11-12-2007

Not sure yet if this actually is a firewall issueâ€¦

I am deploying a boot/build server. The DHCP and Boot Servers are on different machines but the same subnet. Clients on the same subnet as these servers are working ok however, with clients connected to a different, firewalled subnet I am having problems. The client boots, gets an IP address ok but then gives the error message: ProxyDHCP service did not reply to request on port 4011.

The PIX has the 'dhcprelay' command to forward DHCP requests. Do I need to forward another Layer two protocol here? Can anyone help with this?

Collin Clark · ‎11-13-2007

Chris-

We also allow UDP ICMP echo. I'm assuming you have port 4011 open as well. The easiest way to troubleshoot (I think) would be to turn on debug logging to the buffer on the Firewall, try and PXE and view the log. CLI filtering the log will be helpful too.

HTH