Bret is certainly on the right track. If you want the router outside interface to learn its IP address from a DHCP server then you need to have permits in the access list to allow the DHCP.
He seems to have overlooked the fact that you already have some permits for DHCP which are
access-list 102 permit udp host 192.168.x.xx host 172.17.xx.xx eq 67
access-list 102 permit udp host 192.168.x.xx host 172.17.xx.xx eq 68
There are at least three problems with your access list.
- your access list is specifying a particular host as the destination. But as the log messages clearly show the destination address is the broadcast address. So you need to fix the destination address in the access list.
- your access list is specifying a particular host as the source. The log messages show that there are three source addresses and none of them match your specified source host. So you need to fix the source address in the access list.
- your access list specifies both 67 and 68 as destination ports. But the log messages show clearly that 67 is the source port and 68 is the destination port. The good news is that this inconsistency in your access list is not causing any traffic to be denied, since you are specifying only destination ports. So you got it right in one statement and the other statement will never permit anything so it is technically superfluous. So it is not necessary to alter the destination ports (though you might want to fix it as a matter of good form).
HTH
Rick
HTH
Rick
