I am trying to get dhcp snooping to work with option 82 turned on. from my
understanding, to use ip source-gaurd  for non-ip traffic, this "requires"
the use of option 82, so I am trying not to disable option 82 on the switch.
If I have a router acting as a dhcp relay and/or dhcp server, I can
configure the router to accept option 82 packets from the switch. This is
done with the following command:
 
interface fa0/1 (interface facing the dhcp client)
 ip dhcp relay information trusted
 
now this lets the router accept dhcp requests with the option 82 set from
the switch and everything works great. Now here is where I am running into
trouble. If I configure an asa as a dhcp relay or dhcp server instead, the
firewall ignores the dhcp requests with option 82 set from the switch. Is
there a way to allow the dhcp request to be accepted (in exactly the same
way as the ios router)?
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Reply via email to