cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
421
Views
0
Helpful
1
Replies

ASA Not Forwarding DHCPREQUEST Packet to ISC DHCP Server

mcrockett
Level 1
Level 1

We are setting up a new ASA VPN Concentrator that uses the local ISC DHCP server for IP address assignments.

The DHCPDISCOVER packets from the ASA are logged in /var/log/dhcpd.log. The DHCPOFFER packets sent to the ASA are recorded in the log. If I restart dhcpd, I see in dhcpd.leases that entries for the leases have been created with a binding state of free.

The problem is that the ASA never relays the DHCPREQUEST packet to complete the lease that woule result in the VPN connection being established.

What causes an ASA not to relay the DHCPREQUEST packet?

1 Reply 1

Ivan Martinon
Level 7
Level 7

Based on your comments your asa should be passing the ip address assignment of the vpn clients to your dhcp server, can you check that the asa has a scope defined for the dhcp server config? as well can you confirm that the asa has dhcp as the address assignment method, in other words can you post your config?

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: