ASA dhecprelay issue

Unanswered Question
Apr 25th, 2010
User Badges:


I have an ASA 5505 ver 8.2.1.

The ASA5505 is connected to ASA 5510 at HQ with IPsec VPN.

Since DHCP server (windows server 2003) is at HQ, I enabled dhcprelay on it.

An issue is that clients under ASA5505 often fail to get IP address from DHCP server.

Looking at "sh statistics" command, there is too few DHCP OFFER and ACK compared to DHCP DISCOVER and REQUEST.

I might need to run debug or sniff packet anyway, but I just wonder if my configuration lacks someting.

Here is the config and show result.

dhcprelay server outside
dhcprelay enable inside
dhcprelay timeout 60

sh dhcprelay state

Context  Configured as DHCP Relay
Interface inside, Configured for DHCP RELAY SERVER
Interface outside, Configured for DHCP RELAY

sh dhcprelay statistics

DHCP UDP Unreachable Errors: 0
DHCP Other UDP Errors: 0

Packets Relayed
BOOTREQUEST          0
DHCPDISCOVER         1544
DHCPREQUEST          48483
DHCPDECLINE          0
DHCPRELEASE          0
DHCPINFORM           961

BOOTREPLY            0
DHCPOFFER            21
DHCPACK              29
DHCPNAK              0

Thank you very much for looking at my post.


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)


This Discussion