1. The Cisco ASA support dhcp-relay function. The below lab is demonstrated on GNS3, ASA version is ASAv961

2.Topology:

專注于為中小企業提供網站設計、做網站服務,電腦端+手機端+微信端的三站合一,更高效的管理,為中小企業蚌埠免費做網站提供優質的服務。我們立足成都，凝聚了一批互聯網行業人才，有力地推動了上1000+企業的穩健成長，幫助中小企業通過網站建設實現規模擴充和轉變。

3.Configuration on ASA:
!
interface GigabitEthernet0/0
nameif dmz
security-level 95
ip address 198.51.100.1 255.255.255.0
!
interface GigabitEthernet0/1
nameif inside
security-level 90
ip address 192.0.2.1 255.255.255.0
dhcprelay server 198.51.100.2
!
dhcprelay server 198.51.100.2 dmz
dhcprelay enable inside
dhcprelay setroute inside
dhcprelay timeout 60
!
Configuration on DHCP Server:

!
interface Ethernet0/0
ip address 198.51.100.2 255.255.255.0
!
ip route 192.0.2.0 255.255.255.0 198.51.100.1

!
ip dhcp excluded-address 192.0.2.1 192.0.2.2
ip dhcp excluded-address 192.0.2.10 192.0.2.254
!
ip dhcp pool POOL1
import all
network 192.0.2.0 255.255.255.0
DNS-server 192.0.2.10 192.0.2.11
domain-name cisco.com
default-router 198.51.100.2
!

4.Debugging
on DHCP server: # debug ip dhcp server packet

show ip dhcp binding

                                                     # clear ip dhcp binding *
                                                     # show ip dhcp server statics

on ASA relay-agent: # debug dhcprelay event

debug dhcprelay packet

5. Output
   ASA
   DHCPD/RA: Relay msg received, fip=ANY, fport=0 on inside interface
   DHCP: Received a BOOTREQUEST from interface 4 (size = 364)
   DHCPD/RA: Binding successfully added to hash table
   DHCPRA: relay binding created for client 0050.7966.6801.
   DHCPRA: setting giaddr to 192.0.2.1.
   dhcpd_forward_request: request from 0050.7966.6801 forwarded to 198.51.100.2.
   DHCPD/RA: Relay msg received, fip=ANY, fport=0 on dmz interface
   DHCP: Received a BOOTREPLY from relay interface 3 (size = 301, xid = 0xd48a2408) at 01:41:39 UTC Sun Jul 15 2018
   DHCPRA: relay binding found for client 0050.7966.6801.
   DHCPD/RA: creating ARP entry (192.0.2.3, 0050.7966.6801).
   DHCPRA: Adding rule to allow client to respond using offered address 192.0.2.3
   DHCPRA: forwarding reply to client 0050.7966.6801.
   DHCPD/RA: Relay msg received, fip=ANY, fport=0 on inside interface
   DHCP: Received a BOOTREQUEST from interface 4 (size = 364)
   DHCPRA: relay binding found for client 0050.7966.6801.
   DHCPRA: Server requested by client 198.51.100.2
   DHCPRA: setting giaddr to 192.0.2.1.
   DHCPRA: Server request counter 1
   dhcpd_forward_request: request from 0050.7966.6801 forwarded to 198.51.100.2.
   DHCPD/RA: Relay msg received, fip=ANY, fport=0 on dmz interface
   DHCP: Received a BOOTREPLY from relay interface 3 (size = 301, xid = 0xd48a2408) at 01:41:40 UTC Sun Jul 15 2018
   DHCPRA: relay binding found for client 0050.7966.6801.
   DHCPRA: exchange complete - relay binding deleted for client 0050.7966.6801.
   DHCPD/RA: Binding successfully deactivated
   DHCPRA: returned relay binding 192.0.2.1/0050.7966.6801 to address pool.
   dhcpd_destroy_binding() removing NP rule for client 192.0.2.1
   DHCPD/RA: free ddns info and binding
   DHCPD/RA: creating ARP entry (192.0.2.3, 0050.7966.6801).
   DHCPRA: forwarding reply to client 0050.7966.6801.

DHCP SERVER debugging output:
DHCPserver#
Jul 15 01:41:45.067: DHCPD: client's ××× is .
Jul 15 01:41:45.067: DHCPD: No option 125
Jul 15 01:41:45.067: DHCPD: DHCPDISCOVER received from client 0100.5079.6668.01 through relay 192.0.2.1.
Jul 15 01:41:45.067: DHCPD: Sending DHCPOFFER to client 0100.5079.6668.01 (192.0.2.3).
Jul 15 01:41:45.067: DHCPD: no option 125
Jul 15 01:41:45.067: DHCPD: unicasting BOOTREPLY for client 0050.7966.6801 to relay 192.0.2.1.
Jul 15 01:41:46.061: DHCPD: client's ××× is .
Jul 15 01:41:46.061: DHCPD: No option 125
Jul 15 01:41:46.061: DHCPD: DHCPREQUEST received from client 0100.5079.6668.01.
Jul 15 01:41:46.061: DHCPD: Appending default domain from pool
Jul 15 01:41:46.061: DHCPD: Using hostname 'PC-21.cisco.com.' for dynamic update (from hostname option)
Jul 15 01:41:46.061: DHCPD: Sending DHCPACK to client 0100.5079.6668.01 (192.0.2.3).DHCPD: Setting only requested parameters

Jul 15 01:41:46.061: DHCPD: no option 125
Jul 15 01:41:46.061: DHCPD: unicasting BOOTREPLY for client 0050.7966.6801 to relay 192.0.2.1.
DHCPserver#

Reference and Further reading:
https://www.cisco.com/c/en/us/support/docs/security/adaptive-security-appliance-asa-software/116265-configure-product-00.html

網站標題：ConfigureDHCP-relayonCiscoASA
分享地址：http://m.newbst.com/article22/jheecc.html

成都網站建設公司_創新互聯，為您提供搜索引擎優化、App設計、網站導航、建站公司、品牌網站設計、定制網站

廣告

聲明：本網站發布的內容（圖片、視頻和文字）以用戶投稿、用戶轉載內容為主，如果涉及侵權請盡快告知，我們將會在第一時間刪除。文章觀點不代表本網站立場，如需處理請聯系客服。電話：028-86922220；郵箱：631063699@qq.com。內容未經允許不得轉載，或轉載時需注明來源： 創新互聯