Solved

What VPN DHCP solution do you use?

Posted on 2014-12-14
3
115 Views
Last Modified: 2016-01-16
Hi, just wondering what DHCP VPN solution people use for their DNS resolution on VPN remote client.
Currently, we use Cisco ASA and Vital QIP with option 61(client ID).

Initially, Cisco ASA did not support QIP DHCP, but they came up with their workaround as below:
https://tools.cisco.com/quickview/bug/CSCsr96775 - this is published on May 2014.

Above workaround suggests to use DHCP proxy with ClientID feature. However, as [QIP DHCP known bugs and fixes] states, it looks like some of VPN DHCP related bugs not even scheduled to fix yet - The latest bug doc is written 12-1-2014.

How do you support DHCP and DNS resolution for VPN remote users ?
Please share any thought and advice. I am having lots of trouble to utilize Cisco ASA dhcp proxy with Vital QIP.
0
Comment
Question by:ejh3an9
3 Comments
 
LVL 42

Accepted Solution

by:
kevinhsieh earned 500 total points
ID: 40499576
My ASA hands out the IP addresses. I have VPN profiles to determine which address pool the user gets an address from. For example, regular users get addresses from one pool, and power users get addresses from another pool.
0
 
LVL 28

Expert Comment

by:Jan Springer
ID: 40500411
What kevinhsieh said.  And within the group configuration I define whatever DNS servers the inside individuals use.
0
 

Expert Comment

by:Cire Mik
ID: 41416304
Some version of QIP DHCP have MAC address/Client ID related issues. It would not show in the typical DHCP request traffic but as it gets more DHCP request loads from ASA ,using DHCP proxy, it eventually crashes QIP DB - this known issue has been fixed in the latest QDHCP module. Also, do not forget to turn on your Client ID feature on the DHCP server this is more-like server level change.
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There have been a lot of times when we have seen the need to enter a large number of DNS entries in a forward lookup zone. The standard procedure would be to launch the DNS Manager console, create the Zone and start adding new hosts using the New…
Concerto Cloud Services, a provider of fully managed private, public and hybrid cloud solutions, announced today it was named to the 20 Coolest Cloud Infrastructure Vendors Of The 2017 Cloud  (http://www.concertocloud.com/about/in-the-news/2017/02/0…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

829 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question