On 17/09/2015 10:19:46, James Bensley <[email protected]> wrote:
A common deployment is that we are using static IPs between CPE and
exchange device, then the customer is running DHCP relay (it's
configured on our CPE LAN interface) back to a central DHCP server
somewhere else in their WAN. We've had some issues with this not
working at a handful of exchanges and they were the only NGA sites we
had at those exchanges so we had nothing to compare against.
DHCP relay is just unicast UDP. It would be extremely evil if an
upstream device were to intercept that and mangle it.
You could easily get around it though, for example by routing your DHCP
traffic over IPSEC or GRE, or perhaps just by using non-standard port
numbers.