Configuring a permanant DHCP reservation on a Cisco ASA/PIX
17 comments
Comment from: Hellbent [Visitor]
![Hellbent Hellbent](http://www.gravatar.com/avatar/fddc40bc524e92698b0de9d588d1623e?size=64&default=https%3A%2F%2Fwww.bigsoft.co.uk%2Fmedia%2Fshared%2Fglobal%2Favatars%2Fdefault_avatar_unknown.jpg%3Fmtime%3D1519437290)
Comment from: Dan [Visitor]
![Dan Dan](http://www.gravatar.com/avatar/2fe3f5fda17c3cfd5b055049cca8421d?size=64&default=https%3A%2F%2Fwww.bigsoft.co.uk%2Fmedia%2Fshared%2Fglobal%2Favatars%2Fdefault_avatar_unknown.jpg%3Fmtime%3D1519437290)
Hi Hellbent,
Did your Host B get then another IP or does the ASA fall in a Loop?
Regards, Dan.
![TheUnF TheUnF](http://www.gravatar.com/avatar/42e6328a18c09154baf834001ca281ff?size=64&default=https%3A%2F%2Fwww.bigsoft.co.uk%2Fmedia%2Fshared%2Fglobal%2Favatars%2Fdefault_avatar_unknown.jpg%3Fmtime%3D1519437290)
That´s also does not work for me :
#sh running-config arp arp lan_corp 10.11.254.180 4c80.933c.faff
sh dhcpd binding all | include ff
10.11.254.151 014c.8093.3cfa.ff 3420 seconds Automatic
I have set the below arp related configs : arp lan_corp 10.11.254.180 4c80.933c.faff arp timeout 14400 no arp permit-nonconnected
Have also tried with the permit-nonconnected enabled but nothing.
The version of the ASA software is 9.1(3)
Comment from: Ryan [Visitor]
![Ryan Ryan](http://www.gravatar.com/avatar/6f45ded7dcc02af3a21ae8f3bff66b58?size=64&default=https%3A%2F%2Fwww.bigsoft.co.uk%2Fmedia%2Fshared%2Fglobal%2Favatars%2Fdefault_avatar_unknown.jpg%3Fmtime%3D1519437290)
Comment from: mick [Visitor]
![mick mick](http://www.gravatar.com/avatar/43e0433298ee55a9e261ee21bef9c3a0?size=64&default=https%3A%2F%2Fwww.bigsoft.co.uk%2Fmedia%2Fshared%2Fglobal%2Favatars%2Fdefault_avatar_unknown.jpg%3Fmtime%3D1519437290)
Ive been looking for this solution myself. I also tested this and it doesnt seem to work.
test config: arp inside 10.6.0.75 001b.38be.c7fa dhcpd address 10.6.0.70-10.6.0.80 inside
connect the laptop and look at dhcp binding and arp: show dhcpd binding IP address Client Identifier
10.6.0.70 0100.1b38.bec7.fa
show arp
inside 10.6.0.70 001b.38be.c7fa 517
inside 10.6.0.75 001b.38be.c7fa -
the firewall shows the reserved arp but still issues the laptop the first ip from the dhcp pool.
Comment from: Peter Dornauer [Visitor]
![Peter Dornauer Peter Dornauer](http://www.gravatar.com/avatar/55fc80b9f198b2e0a760a6eeca9c641b?size=64&default=https%3A%2F%2Fwww.bigsoft.co.uk%2Fmedia%2Fshared%2Fglobal%2Favatars%2Fdefault_avatar_unknown.jpg%3Fmtime%3D1519437290)
Comment from: Marr [Visitor]
![Marr Marr](http://www.gravatar.com/avatar/292b84888b93e686f56b484ce80d5fcf?size=64&default=https%3A%2F%2Fwww.bigsoft.co.uk%2Fmedia%2Fshared%2Fglobal%2Favatars%2Fdefault_avatar_unknown.jpg%3Fmtime%3D1519437290)
This will work,but you have to set you dhcp scope high and give static IP addresses to your devices from below the dhcp scope. For example:
dhcpd address 192.168.1.50-192.168.1.100 inside
Give your routers, switches, and host static IP addresses in the range of: 192.168.1.1 - 192.168.1.49
arp inside 192.168.1.10 0c1b.ae43.bd21 arp inside 192.168.1.11 0c1b.ae43.bd22 arp inside 192.168.1.12 0c1b.ae43.bd23 etc……
Comment from: EINAR HONEGGER THOME [Visitor]
![EINAR HONEGGER THOME EINAR HONEGGER THOME](http://www.gravatar.com/avatar/86712adf0acd589efc4d269b23bacb44?size=64&default=https%3A%2F%2Fwww.bigsoft.co.uk%2Fmedia%2Fshared%2Fglobal%2Favatars%2Fdefault_avatar_unknown.jpg%3Fmtime%3D1519437290)
This tutorial is useless because entering a mac adderess associated to an IP at the ARP table wont make DHCP assign that IP to that specific MAC address.
MARR, IF I use static IPs on those Devices, DHCP will have no influence on those IPs settings! ASA still lacks this functionality!
Comment from: Rudolf [Visitor]
![Rudolf Rudolf](http://www.gravatar.com/avatar/f21f5a569701a546274680de9a37f078?size=64&default=https%3A%2F%2Fwww.bigsoft.co.uk%2Fmedia%2Fshared%2Fglobal%2Favatars%2Fdefault_avatar_unknown.jpg%3Fmtime%3D1519437290)
Unfortunately, indeed this tutorial provides a solution that doesn’t solve what it claims to do.
It is really a shame that the ASA can’t give a fixed IP to a MAC address, something most routers in the price range of 30 dollar can already do…
Comment from: davidnewcomb [Member]
![admin admin](http://www.gravatar.com/avatar/04d8ea8891106e00c746d31da92351c8?size=64&default=https%3A%2F%2Fwww.bigsoft.co.uk%2Fmedia%2Fshared%2Fglobal%2Favatars%2Fdefault_avatar_unknown.jpg%3Fmtime%3D1519437290)
Comment from: Networker [Visitor]
![Networker Networker](http://www.gravatar.com/avatar/0ba20191298addcc4c8e2877ac679170?size=64&default=https%3A%2F%2Fwww.bigsoft.co.uk%2Fmedia%2Fshared%2Fglobal%2Favatars%2Fdefault_avatar_unknown.jpg%3Fmtime%3D1519437290)
Comment from: Bryan [Visitor]
![Bryan Bryan](http://www.gravatar.com/avatar/fcb85e56887b33b58c36259a913e5fd5?size=64&default=https%3A%2F%2Fwww.bigsoft.co.uk%2Fmedia%2Fshared%2Fglobal%2Favatars%2Fdefault_avatar_unknown.jpg%3Fmtime%3D1519437290)
Comment from: Michael [Visitor]
![Michael Michael](http://www.gravatar.com/avatar/0c35dfc9d06e307c4fbe810c599d7ab0?size=64&default=https%3A%2F%2Fwww.bigsoft.co.uk%2Fmedia%2Fshared%2Fglobal%2Favatars%2Fdefault_avatar_unknown.jpg%3Fmtime%3D1519437290)
There is an alias option to the arp command that prevents the entry from expiring, would that solve the issue, I have not bothered to test it, but I read from the remarks that an issue would be that the reservation will expire, add alias at the end and it will not?
Michael
Comment from: Michael [Visitor]
![Michael Michael](http://www.gravatar.com/avatar/0c35dfc9d06e307c4fbe810c599d7ab0?size=64&default=https%3A%2F%2Fwww.bigsoft.co.uk%2Fmedia%2Fshared%2Fglobal%2Favatars%2Fdefault_avatar_unknown.jpg%3Fmtime%3D1519437290)
Naa, 4get that, that also does not work.
Michael
Comment from: julia [Visitor]
![julia julia](http://www.gravatar.com/avatar/a86ff9affc6a33d8f4b31f3b61e33158?size=64&default=https%3A%2F%2Fwww.bigsoft.co.uk%2Fmedia%2Fshared%2Fglobal%2Favatars%2Fdefault_avatar_unknown.jpg%3Fmtime%3D1519437290)
Comment from: Jorge C. Alexandres [Visitor]
![Jorge C. Alexandres Jorge C. Alexandres](http://www.gravatar.com/avatar/feffb029f580b7277eedd06ee061f1ce?size=64&default=https%3A%2F%2Fwww.bigsoft.co.uk%2Fmedia%2Fshared%2Fglobal%2Favatars%2Fdefault_avatar_unknown.jpg%3Fmtime%3D1519437290)
Comment from: Mirza [Visitor]
![Mirza Mirza](http://www.gravatar.com/avatar/721d257b12bbe51dce621788e002302e?size=64&default=https%3A%2F%2Fwww.bigsoft.co.uk%2Fmedia%2Fshared%2Fglobal%2Favatars%2Fdefault_avatar_unknown.jpg%3Fmtime%3D1519437290)
Form is loading...