Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

ASA DHCP server question

Can the ASA DHCP server be configured to give out addresses to clients that are in a different subnet from that which is configured on the interface?

Connected to my inside interface I have a layer three switch that has two VLAN's configured on it.  One VLAN is on the same subnet as the inside interface.  That network is 10.10.1.x with the inside interface being 10.10.1.1.  The other VLAN is 192.168.1.x and routes on the L3 switch.  Currently the users in the 10.10.1.x network get DHCP addresses from a seperate DHCP server.  I would like the users in the 192.168.1.x network to get their addresses from the ASA.

If I configured the ASA as follows with this work even though the pool is not in the same subnet as the inside interface?

dhcpd address 192.168.1.5-192.168.1.254 inside
dhcpd dns 8.8.8.8
dhcpd lease 3600
dhcpd enable inside

Thank you, Seth

1 ACCEPTED SOLUTION

Accepted Solutions

ASA DHCP server question

Hello Seth,

No, the ASA cannot provide addresses for ranges not directly connected to the ASA interface:

Check my post about this on my website:

http://www.laguiadelnetworking.com/all-you-need-to-know-about-asa-as-a-dhcp-server/

For more information about Core and Security Networking follow my website at http://laguiadelnetworking.

Any question contact me at jcarvaja@laguiadelnetworking.com

Cheers,

Julio Carvajal Segura

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC
1 REPLY

ASA DHCP server question

Hello Seth,

No, the ASA cannot provide addresses for ranges not directly connected to the ASA interface:

Check my post about this on my website:

http://www.laguiadelnetworking.com/all-you-need-to-know-about-asa-as-a-dhcp-server/

For more information about Core and Security Networking follow my website at http://laguiadelnetworking.

Any question contact me at jcarvaja@laguiadelnetworking.com

Cheers,

Julio Carvajal Segura

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC
114
Views
0
Helpful
1
Replies
CreatePlease to create content