We help IT Professionals succeed at work.


cytrax asked
Medium Priority
Last Modified: 2013-11-16

I am currently configuring a Cisco PIX 501 firewall. However, whenever I try to configure IP address on it, I get an error message saying 'Interface address is not on same subnet as DHCP poolroute'. So I figured out that PIX is acting as a DHCP server. What I really want to do is disable this function. I've ran through several commands to no avail.

Somebody please help!

Watch Question

Cyclops3590Sr Software Engineer

first do
show run | grep dhcpd
look for the line with
dhcpd address <start IP>-<end IP> inside

copy that line down and put a no before it
example, by default it should like like this
dhcpd address inside
although the range may be different depending upon the license you have on your 501, I have an unlimited license so it spans the entire class C
so if that's what is says then you type
no dhcpd address inside

this will get rid of the range and automatically turn off the dhcp server on the firewall
now you should be able to change the IP of the 501
To disable DHCP through the GUI you need to do the following in V.7

Click on the Configuration tab across the top

Click on Properties down the left hand side

Click the + next to DHCP services in the middle list.

Click on DHCP Server.

This is where you are able to Enable and Disable DHCP

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts


Thank you for reply.

@ Cyclops3590: I have tried what you suggested. However I get this error message: 'Type help or '?' for a list of available commands'. This is because I think the version of IOS on PIX 501 is only a fraction of the real deal, which is why I'm having this problem.

@ mh144831: I will try you suggestion. I guess stupid enough to think command line would save. Back to good old GUI then.

I'll keep you posted.

Cyclops3590Sr Software Engineer

are you in global mode when you try this command your command line needs to look like this


Hello guys,

Yes, I was running all the commands in config mode. I think the IOS on the firewall is limited. However, I was able to use GUI like mh144831 suggested. It was pretty straight forward from there. It's a shame I can't do it all from command mode. Thanks for the all your contributions.

Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.


Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.