We help IT Professionals succeed at work.

Excluding ip address from dhcp scope on a Cisco Pix

ccptechs asked
Medium Priority
Last Modified: 2012-05-06
How can I configure the Pix firewall, which is perfoming dhcp, to exclude ip addresses and from the dhcp scope? Currently the two ip addresses in question are included in the range. The dhcp configuration on the Pix is listed below.

dhcpd address inside
dhcpd dns
dhcpd lease 3600
dhcpd ping_timeout 750
dhcpd auto_config outside
dhcpd enable inside
Watch Question

Top Expert 2009
You can't.  Your best bet would be to statically readdress those two hosts outside the DHCP range with and

You might be able to do something like this (haven't tried it):

dhcpd address inside
dhcpd address inside
dhcpd address inside

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts

Here is the command to use to exclude an IP address from the DHCP pool.

router(config)#ip dhcp excluded-address
router(config)#ip dhcp excluded-address

Top Expert 2009


This is a PIX.  That command is for an IOS based device.

My bad I saw Cisco / dhcp . . sorry.


We decided to move the two devices out of the dynamic range.
Top Expert 2009

Good choice.  That's really the best option.  Use .200-.254 for static assignments.
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.


Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.