Solved

Unable to get DHCP lease

Posted on 2010-08-23
11
989 Views
Last Modified: 2012-05-10
Hello,

We are having an issue with DHCP leases on our network.  Up until this point we only used static addressing.  At this time we need to be able to pull dynamic lease from one of our DCs.  In this instance our LAN_Client and LAN_DC just are not playing nice.  If you static the client devices IP they are able to communication with everything on the network.

How things move:  Client>DHCP Request>Switch>Firewall>Switch>Server

Our firewall policy is wide open at this time for traffic between the two VLANs.  The switch that is passing data is a PowerConnect 5424.

Detailed movement:  Client>DHCP Request>Switch>VLAN 15>Firewall>VLAN 10>Switch>DHCP response>Client

If we take a client device and connect it directly to VLAN 10 it is able to pull a dynamic address.  

Any thoughts as to what would be causing this?
0
Comment
Question by:jjl505
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
11 Comments
 
LVL 6

Expert Comment

by:Galtar99
ID: 33506492
Do you have IP helper (assuming you're running cisco switches) or similar statement on your client VLAN's to redirect the DHCP broadcasts to your DHCP server(s)?
http://www.cisco.com/en/US/docs/ios/12_1/iproute/command/reference/1rdipadr.html#wp1018606 
0
 

Author Comment

by:jjl505
ID: 33506574
We are running Dell PowerConnect...
0
 
LVL 4

Expert Comment

by:bhartwell
ID: 33506855
Can your router be configured to allow BOOTP relay? Did you try setting up a dhcp relay agent on the VLAN 15 side of your network? Im guessing that if your trying to communicate across multiple vlans you may need to have the relay agent in place so that the dhcp server knows where those clients reside. This article may be helpful in solving your problem:

http://www.serverwatch.com/tutorials/article.php/2193031/Back-to-Basics-The-DHCP-Relay-Agent.htm

0
Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

 

Author Comment

by:jjl505
ID: 33511512
I will have a loook at the article and get back to you.  Thank you for the prompt response.
0
 
LVL 2

Accepted Solution

by:
pmanno earned 500 total points
ID: 33524431
DHCP is a broadcast based protocol.  In order for it to work, all machines (client and server) must be in the same broadcast domain.  A firewall/router does not pass broadcast traffic unless it is configured to relay that traffic through in which case it takes the DHCP request and forwards it to one or more servers.

What firewall are you using?  If SonicWall, look at Network -> IP Helper for the configuration of the relay.
0
 
LVL 9

Expert Comment

by:Donboo
ID: 33526250
Looks very much like you problem is the firewall that is not configured to relay the dhcp request.

Check the firewall see if you have configured DHCP relay agent/ IP-helper.

What firewall are you using?
0
 

Author Comment

by:jjl505
ID: 33526516
A Fortinet Fortigate...I will have our Security guy take a look at it.
0
 

Author Comment

by:jjl505
ID: 33627960
It was a firewall issue.  DHCP relaying was not enabled.  I think a thorough beating is in order.
0
 
LVL 2

Expert Comment

by:pmanno
ID: 33627988
Dude, no points!?  I put up DHCP relay...
0

Featured Post

Enroll in July's Course of the Month

July's Course of the Month is now available! Enroll to learn HTML5 and prepare for certification. It's free for Premium Members, Team Accounts, and Qualified Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The worst thing when starting a new job is when the previous Network Administrator left behind no documentation. How do you get into the devices? If you've been in this situation or just accidently mistyped your password, this article will hopefully…
I eventually solved a perplexing problem setting up telnet for a new switch.  I installed a new Cisco WS-03560X-24P switch connected to an existing Cisco 4506 running a WS-X4013-10GE Sup II-Plus. After configuring vlans and trunking,  I could no…
There's a multitude of different network monitoring solutions out there, and you're probably wondering what makes NetCrunch so special. It's completely agentless, but does let you create an agent, if you desire. It offers powerful scalability …
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…

635 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question