Hi

I am currently setting up two Cisco ASA 5505 firewalls on a test enviroment in our lab.

We want to be able create a test vpn connection, possibly using EZVPN, with a DHCP server at one end and a DHCP client at the other. We want our pc's to get the DHCP address from our DHCP server instead of the firewall. Has anyone ever completed this?

Regards

The ASA has a DHCP Relay feature, where you specify the DHCP Server (and the interface it can be found on) and the ASA will forward DHCP requests to that IP; I've never tried it across a tunnel.

However, seems like a questionable design; if your VPN tunnel/internet is down, now your client's can't get a DHCP address.

_________________
"A problem well stated is a problem half solved". (Charles Kettering)

I haven't tried this myself. But if you configure DHCP relay on the ASA and allow UDP port 67 in your crypto ACL, it should work..

_________________
Isuru Senadheera
MCSE, CCNP, CCSP, MCITP
www.isururakshitha.org