cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
202
Views
0
Helpful
1
Replies

acl help (dhcp breaks)

b.withrow
Level 1
Level 1

Bear with me on this:

here is some of the conifg from a 1710:

interface Ethernet0

ip access-group 102 in

access-list 102 permit udp 172.17.32.0 0.0.0.255 host 192.168.105.7 eq 53

access-list 102 permit tcp 172.17.32.0 0.0.0.255 any eq www

access-list 102 deny ip any any log

Ethernet0 is a private connection which is intended to allow guest access to the internet, without any access to the local network. The ACL I applied seems to be working as intended, except for the fact that DHCP will not work to E0. ANy ideas why?

Thanks in advance!

1 Reply 1

skarundi
Level 4
Level 4

Is the DHCP server on the same net as ethernet0 ?

Are you using IP helper to forward DHCP requests to the DHCP server. ?

If the DHCP server is on a different net and you are using the DHCP relay ( ip helper-address ) feature then add something like this to the acl

permit udp any host 255.255.255.255 eq bootpc

If the DHCP server is on the same net as Ethernet0, then you may want to sniff the traffic going to the DHCP server to find out why it is not providing addresses to the clients.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: