clients from vlan do not get a dhcp lease?! (using access router 1721 and 4-port wic switch)

Discussion in 'Cisco' started by Tom, Jun 10, 2004.

  1. Tom

    Tom Guest

    I've a cisco 1700 router with 4port wic switch.
    For 4port wic switch see:

    The clients connected to the cisco 4port wic switch "should" get an ip
    adress (lease) from the dhcp server,
    which is also running on this same 1721 router.

    The dhcp server works well as it is delivering to my private-lan) see config
    The private lan is connected via (buildin) fastethernet0 to a third-party
    switch. No vlan is used on this segment! This segment uses the "ip dhcp pool
    private-lan" see config below.

    The client from wifi-lan do not get a lease ?

    I can not see that something is blocked. So, what do you think might be the

    Here are the dhcp server settings:

    no ip dhcp conflict logging
    ip dhcp excluded-address
    ip dhcp excluded-address
    ip dhcp excluded-address
    ip dhcp pool private-lan
    netbios-node-type p-node
    domain-name private.local
    lease 3
    ip dhcp pool wifi-lan
    domain-name wifi.local
    netbios-node-type p-node
    lease 0 1

    Here is the fastethernet port (binded to vlan20) where a client is

    interface FastEthernet2
    description wifi-lan-laptop
    switchport access vlan 20
    no ip address
    no cdp enable

    interface Vlan20
    ip address
    ip access-group 11 in
    no ip proxy-arp
    ip nat inside

    Standard IP access list 11
    10 permit, wildcard bits (1032 matches)

    May be you can give me hint and tell me what I can try?

    In advance, many thanks!
    Tom, Jun 10, 2004
    1. Advertisements

  2. On Thu, 10 Jun 2004 20:11:51 +0200, Tom wrote:

    DHCP clients use source address in their broadcasts. After all,
    they don't know what their address is. You need to allow them in the acl.

    access-list 11 permit

    Or something like that.
    Martin Gallagher, Jun 11, 2004
    1. Advertisements

  3. Tom

    Tosh Guest

    access-list 11 permit more granular one could be:
    access-list 111 permit udp any any eq bootps
    Tosh, Jun 11, 2004
  4. Tom

    Guest Guest

    Yep, thanks a lot, you were right!!

    Guest, Jun 11, 2004
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.