What VPN DHCP solution do you use?

Posted on 2014-12-14
Medium Priority
Last Modified: 2016-01-16
Hi, just wondering what DHCP VPN solution people use for their DNS resolution on VPN remote client.
Currently, we use Cisco ASA and Vital QIP with option 61(client ID).

Initially, Cisco ASA did not support QIP DHCP, but they came up with their workaround as below:
https://tools.cisco.com/quickview/bug/CSCsr96775 - this is published on May 2014.

Above workaround suggests to use DHCP proxy with ClientID feature. However, as [QIP DHCP known bugs and fixes] states, it looks like some of VPN DHCP related bugs not even scheduled to fix yet - The latest bug doc is written 12-1-2014.

How do you support DHCP and DNS resolution for VPN remote users ?
Please share any thought and advice. I am having lots of trouble to utilize Cisco ASA dhcp proxy with Vital QIP.
Question by:ejh3an9
LVL 43

Accepted Solution

kevinhsieh earned 1500 total points
ID: 40499576
My ASA hands out the IP addresses. I have VPN profiles to determine which address pool the user gets an address from. For example, regular users get addresses from one pool, and power users get addresses from another pool.
LVL 29

Expert Comment

by:Jan Springer
ID: 40500411
What kevinhsieh said.  And within the group configuration I define whatever DNS servers the inside individuals use.

Expert Comment

by:EK 365
ID: 41416304
Some version of QIP DHCP have MAC address/Client ID related issues. It would not show in the typical DHCP request traffic but as it gets more DHCP request loads from ASA ,using DHCP proxy, it eventually crashes QIP DB - this known issue has been fixed in the latest QDHCP module. Also, do not forget to turn on your Client ID feature on the DHCP server this is more-like server level change.

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

This installment of Make It Better gives Media Temple customers the latest news, plugins, and tutorials to make their VPS hosting experience that much smoother.
OnPage has always empowered IT teams but also amplify alerting capabilities. In the following slides you will see 5 features of OnPage that act as important tools for any IT team to resolve incidents faster
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

627 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question