Question : Configuring DHCP relay with these variables

Hi experts,

I have quite an interesting problem that I need a little bit of help on, and a fresh perspective as well. I'm working in a production enviroment that is just now seeing the necessity of putting in a dedicated controls network for the production side, to ensure in house service, and better reliability. Let me start off by explaining my setup, as it's quite a curious one.

Each business inside the plant has its own dedicated VLAN, with a total of about ten to fifteen in all. I'm in the early stages of planning and implementing the new network, and have installed a catalyst 4507 to act as my core switch. This core switch connects back to a catalyst 6509 that acts as a layer 3 gateway switch, routing traffic throughout the plant. It's designed to pick up traffic from the different switches with production equipment contained on them and route them to a checkpoint firewall also connected to the 6509. The checkpoint authenticates each IP and allows them whatever acceess they require to whereever. This part of the equation works fine. What I'm doing is setting up DHCP on a Windows Server 2003 box, and using DHCP relay on the checkpoint to route DHCP requests to the server. I've tested my DHCP, and it works on the VLAN the server is in, however I can't get it to route to any other VLANs outside that one. I don't know if the checkpoint or the 6509 are set up to allow the correct things through, I don't have rights to touch either one of those, but then I'm also unsure what to touch even inside those. I've set up DHCP snooping inside my 4507, and haven't caught any traffic as of yet. Could there be something not configured right that I need to check? There's a lot of variables to consider, and that's what makes this such a mess really... Thank you for the help, and anymore clarification that's needed, I'll try and give it.

Answer : Configuring DHCP relay with these variables

DHCP Scopes and zones are the same.

You don't need a DHCP relay on every hop, just one DHCP Relay on everyVLAN where you want to serve DHCP IPs.

Example:
VLAN 5: Users, Router IP: 10.0.1.1, DHCP helper enabled.
VLAN 6: Users, Router IP: 10.0.2.1, DHCP helper enabled.
VLAN 7: Firewall, WAN.
VLAN 8: Servers. DHCP Server IP 10.0.25.3.

You need to configure DHCP helper on VLAN 5 an 6 so the Users will be able to get an IP. The helper must be configured to send the requests to DHCP Server (Ip 10.0.25.3).

The Firewall on VLAN 7 does not need any DHCP helper as there are no users on that VLAN. It just need to allow the DHCP Relay traffic to pass from VLANS 5 and 6 to VLAN 8.

The DHCP Server will get the requests from VLAN 5 and 6. It will also get the IP from the router which has relayed the request. When the request is comming from the router with IP 10.0.1.1 it will serve IPs from the range 10.0.1.1-10.0.1.255, when relayed from router with IP 10.0.2.1 it will serve ips from range 10.0.2.x
Random Solutions  
 
programming4us programming4us