2.Topology:
专注于为中小企业提供网站设计、做网站服务,电脑端+手机端+微信端的三站合一,更高效的管理,为中小企业蚌埠免费做网站提供优质的服务。我们立足成都,凝聚了一批互联网行业人才,有力地推动了上1000+企业的稳健成长,帮助中小企业通过网站建设实现规模扩充和转变。
3.Configuration on ASA:
!
interface GigabitEthernet0/0
nameif dmz
security-level 95
ip address 198.51.100.1 255.255.255.0
!
interface GigabitEthernet0/1
nameif inside
security-level 90
ip address 192.0.2.1 255.255.255.0
dhcprelay server 198.51.100.2
!
dhcprelay server 198.51.100.2 dmz
dhcprelay enable inside
dhcprelay setroute inside
dhcprelay timeout 60
!
Configuration on DHCP Server:
!
interface Ethernet0/0
ip address 198.51.100.2 255.255.255.0
!
ip route 192.0.2.0 255.255.255.0 198.51.100.1
!
ip dhcp excluded-address 192.0.2.1 192.0.2.2
ip dhcp excluded-address 192.0.2.10 192.0.2.254
!
ip dhcp pool POOL1
import all
network 192.0.2.0 255.255.255.0
DNS-server 192.0.2.10 192.0.2.11
domain-name cisco.com
default-router 198.51.100.2
!
4.Debugging
on DHCP server: # debug ip dhcp server packet
# clear ip dhcp binding *
# show ip dhcp server statics
on ASA relay-agent: # debug dhcprelay event
DHCP SERVER debugging output:
DHCPserver#
Jul 15 01:41:45.067: DHCPD: client's ××× is .
Jul 15 01:41:45.067: DHCPD: No option 125
Jul 15 01:41:45.067: DHCPD: DHCPDISCOVER received from client 0100.5079.6668.01 through relay 192.0.2.1.
Jul 15 01:41:45.067: DHCPD: Sending DHCPOFFER to client 0100.5079.6668.01 (192.0.2.3).
Jul 15 01:41:45.067: DHCPD: no option 125
Jul 15 01:41:45.067: DHCPD: unicasting BOOTREPLY for client 0050.7966.6801 to relay 192.0.2.1.
Jul 15 01:41:46.061: DHCPD: client's ××× is .
Jul 15 01:41:46.061: DHCPD: No option 125
Jul 15 01:41:46.061: DHCPD: DHCPREQUEST received from client 0100.5079.6668.01.
Jul 15 01:41:46.061: DHCPD: Appending default domain from pool
Jul 15 01:41:46.061: DHCPD: Using hostname 'PC-21.cisco.com.' for dynamic update (from hostname option)
Jul 15 01:41:46.061: DHCPD: Sending DHCPACK to client 0100.5079.6668.01 (192.0.2.3).DHCPD: Setting only requested parameters
Jul 15 01:41:46.061: DHCPD: no option 125
Jul 15 01:41:46.061: DHCPD: unicasting BOOTREPLY for client 0050.7966.6801 to relay 192.0.2.1.
DHCPserver#
Reference and Further reading:
https://www.cisco.com/c/en/us/support/docs/security/adaptive-security-appliance-asa-software/116265-configure-product-00.html