Solved: ASA DHCP server question

srosenthal · ‎09-05-2013

Can the ASA DHCP server be configured to give out addresses to clients that are in a different subnet from that which is configured on the interface?

Connected to my inside interface I have a layer three switch that has two VLAN's configured on it. One VLAN is on the same subnet as the inside interface. That network is 10.10.1.x with the inside interface being 10.10.1.1. The other VLAN is 192.168.1.x and routes on the L3 switch. Currently the users in the 10.10.1.x network get DHCP addresses from a seperate DHCP server. I would like the users in the 192.168.1.x network to get their addresses from the ASA.

If I configured the ASA as follows with this work even though the pool is not in the same subnet as the inside interface?

dhcpd address 192.168.1.5-192.168.1.254 inside
dhcpd dns 8.8.8.8
dhcpd lease 3600
dhcpd enable inside

Thank you, Seth

Julio Carvajal · ‎09-05-2013

Hello Seth,

No, the ASA cannot provide addresses for ranges not directly connected to the ASA interface:

Check my post about this on my website:

http://www.laguiadelnetworking.com/all-you-need-to-know-about-asa-as-a-dhcp-server/

For more information about Core and Security Networking follow my website at http://laguiadelnetworking.

Any question contact me at jcarvaja@laguiadelnetworking.com

Cheers,

Julio Carvajal Segura

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

View solution in original post

Julio Carvajal · ‎09-05-2013