Link to home
Start Free TrialLog in
Avatar of cytrax
cytrax

asked on

CISCO PIX 501 DHCP

Hello,

I am currently configuring a Cisco PIX 501 firewall. However, whenever I try to configure IP address on it, I get an error message saying 'Interface address is not on same subnet as DHCP poolroute'. So I figured out that PIX is acting as a DHCP server. What I really want to do is disable this function. I've ran through several commands to no avail.

Somebody please help!

Cytrax
Avatar of Cyclops3590
Cyclops3590
Flag of United States of America image

first do
show run | grep dhcpd
look for the line with
dhcpd address <start IP>-<end IP> inside

copy that line down and put a no before it
example, by default it should like like this
dhcpd address 192.168.1.2-192.168.1.254 inside
although the range may be different depending upon the license you have on your 501, I have an unlimited license so it spans the entire class C
so if that's what is says then you type
no dhcpd address 192.168.1.2-192.168.1.254 inside

this will get rid of the range and automatically turn off the dhcp server on the firewall
now you should be able to change the IP of the 501
ASKER CERTIFIED SOLUTION
Avatar of mh144831
mh144831

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of cytrax
cytrax

ASKER

Thank you for reply.

@ Cyclops3590: I have tried what you suggested. However I get this error message: 'Type help or '?' for a list of available commands'. This is because I think the version of IOS on PIX 501 is only a fraction of the real deal, which is why I'm having this problem.

@ mh144831: I will try you suggestion. I guess stupid enough to think command line would save. Back to good old GUI then.

I'll keep you posted.

Cytrax
are you in global mode when you try this command your command line needs to look like this
pix(config)#
Avatar of cytrax

ASKER

Hello guys,

Yes, I was running all the commands in config mode. I think the IOS on the firewall is limited. However, I was able to use GUI like mh144831 suggested. It was pretty straight forward from there. It's a shame I can't do it all from command mode. Thanks for the all your contributions.

Cytrax