?
Solved

What VPN DHCP solution do you use?

Posted on 2014-12-14
3
Medium Priority
?
118 Views
Last Modified: 2016-01-16
Hi, just wondering what DHCP VPN solution people use for their DNS resolution on VPN remote client.
Currently, we use Cisco ASA and Vital QIP with option 61(client ID).

Initially, Cisco ASA did not support QIP DHCP, but they came up with their workaround as below:
https://tools.cisco.com/quickview/bug/CSCsr96775 - this is published on May 2014.

Above workaround suggests to use DHCP proxy with ClientID feature. However, as [QIP DHCP known bugs and fixes] states, it looks like some of VPN DHCP related bugs not even scheduled to fix yet - The latest bug doc is written 12-1-2014.

How do you support DHCP and DNS resolution for VPN remote users ?
Please share any thought and advice. I am having lots of trouble to utilize Cisco ASA dhcp proxy with Vital QIP.
0
Comment
Question by:ejh3an9
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 42

Accepted Solution

by:
kevinhsieh earned 1500 total points
ID: 40499576
My ASA hands out the IP addresses. I have VPN profiles to determine which address pool the user gets an address from. For example, regular users get addresses from one pool, and power users get addresses from another pool.
0
 
LVL 29

Expert Comment

by:Jan Springer
ID: 40500411
What kevinhsieh said.  And within the group configuration I define whatever DNS servers the inside individuals use.
0
 

Expert Comment

by:Cire Mik
ID: 41416304
Some version of QIP DHCP have MAC address/Client ID related issues. It would not show in the typical DHCP request traffic but as it gets more DHCP request loads from ASA ,using DHCP proxy, it eventually crashes QIP DB - this known issue has been fixed in the latest QDHCP module. Also, do not forget to turn on your Client ID feature on the DHCP server this is more-like server level change.
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

WARNING:   If you follow the instructions here, you will wipe out your VTP and VLAN configurations.  Make sure you have backed up your switch!!! I recently had some issues with a few low-end Cisco routers (RV325) and I opened a case with Cisco TA…
Let’s face it: one of the reasons your organization chose a SaaS solution (whether Microsoft Dynamics 365, Netsuite or SAP) is that it is subscription-based. The upkeep is done. Or so you think.
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…
Suggested Courses

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question