We help IT Professionals succeed at work.

Excluding ip address from dhcp scope on a Cisco Pix

ccptechs
ccptechs asked
on
Medium Priority
3,040 Views
Last Modified: 2012-05-06
How can I configure the Pix firewall, which is perfoming dhcp, to exclude ip addresses 192.168.1.101 and 192.168.1.68 from the dhcp scope? Currently the two ip addresses in question are included in the range. The dhcp configuration on the Pix is listed below.

dhcpd address 192.168.1.25-192.168.1.199 inside
dhcpd dns 66.255.85.8 66.255.85.9
dhcpd lease 3600
dhcpd ping_timeout 750
dhcpd auto_config outside
dhcpd enable inside
Comment
Watch Question

Top Expert 2009
Commented:
You can't.  Your best bet would be to statically readdress those two hosts outside the DHCP range with 192.168.1.200 and 192.168.1.201.

You might be able to do something like this (haven't tried it):

dhcpd address 192.168.1.25-192.168.1.67 inside
dhcpd address 192.168.1.69-192.168.1.100 inside
dhcpd address 192.168.1.102-192.168.1.199 inside

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts

Commented:
Here is the command to use to exclude an IP address from the DHCP pool.

router(config)#ip dhcp excluded-address 192.168.1.101
router(config)#ip dhcp excluded-address 192.168.1.68




Top Expert 2009

Commented:
lwoodtri,

This is a PIX.  That command is for an IOS based device.

Commented:
My bad I saw Cisco / dhcp . . sorry.

Author

Commented:
We decided to move the two devices out of the dynamic range.
Top Expert 2009

Commented:
Good choice.  That's really the best option.  Use .200-.254 for static assignments.
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.