Hi Phunky,
Logging is on buffered informational.
I have nat 0 on the subnet. As I mentioned, I can hping the DHCP-Server on
udp/67 from the client.
What's worrying me is that I can't ping the DHCP-Server directly from the
remote firewall - I have to specify interface inside when I ping to make it go
through properly.
Seeing as it's ezvpn, I can't configure much on the remote firewall. Do you
know of a setting on the ezvpn server which might help the remote firewall
itself to ping the DHCP?
Thanks in advance,
Chris
----- UrsprÃngliche Nachricht -----
Von: "Gettin Phunky" <phunkodelic@gmail.com>
An: "Meidinger Chris" <chris.meidinger@badenit.de>
Gesendet: 16.03.06 17:04
Betreff: Re: PIX dhcprelay via IPSec.
What is your logging turned up too?
From what you describe I am wondering if it is a NAT issue. You need
to no nat the traffic so it will not get hung up in NAT translation.
On 3/15/06, Meidinger Chris <chris.meidinger@badenit.de> wrote:
Hi List,
I have a question about relaying DHCP over VPN with PIX.
I have the following setup:
Client
|
|
|
Remote Site PIX running in network-extension mode
|V|
|P| Internet
|N|
Central PIX acting as concentrator
|
| Net 1
|
Inside Pix providing access control
|
| Net 2
|
DHCP Server x.x.x.x
The client needs to talk to the DHCP-Server in Net 2. It can ping the
DHCP fine so routing and all is OK, but the relayed Unicasts on udp/67
seem to die inside the remote PIX. No log messages, no debug messages
(at least in any debug mode I though to try) and still no packet.
I have the following config:
hostname(config)# show dhcprelay
dhcprelay server x.x.x.x outside
dhcprelay enable inside
I see statistics,
hostname(config)# show dhcprelay stat
Packets Relayed
BOOTREQUEST 0
DHCPDISCOVER 48
DHCPREQUEST 0
DHCPDECLINE 0
DHCPRELEASE 0
DHCPINFORM 0
BOOTREPLY 0
DHCPOFFER 0
DHCPACK 0
DHCPNAK 0
but no packet in Net 1 and no packet in Net 2 (got inline sniffers in
both trying to troubleshoot this)
Can anyone point me in the right direction what the problem might be?
Thanks in advance,
Chris
