This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DHCP Relay over Net2Net VPN

Hi,

has anyone been successfull in using the DHCP Relay over a Net2Net VPN connection?
What I would like to do:
I have two ASL V6 Boxes connected over IPSec VPN. The Net2Net tunnel works for the clients (clients can access the 2003 Server). Now I want the clients to get the IP address over DHCP. The DHCP server is a Windows 2003 R2 box, which is on one site of the Net2Net VPN, the ASL DHCP Relay should relay to that DHCP server in order to serve the IP addresses for the clients.

W2003 DHCP Server -- ASL Box 1 -->> Net2Net VPN tunnel

This thread was automatically locked due to age.

Parents

0 Suppentrulli over 18 years ago

Hi Jochen,

with V5-firewalls (an probably V6) it is not possible to access the remote-lan via vpn from the local firewall, just take a look here. I think dhcp-relaying will only work if you use this workaround. It is written for dns-proxy, but should also work for dhcp-relay.
Cancel
Vote Up 0 Vote Down

Cancel
0 jschmitt76 over 18 years ago in reply to Suppentrulli

Thanks a lot for the hint. I have already tried that. The DNS proxy works and the remote ASL is able to ping the connected network over the net2net vpn tunnel.
I took a look at the dhcprelay process and the man-page. I think that it's not possible to use the dhcp relay over a net2net vpn connection because the dhcprelay requires two interfaces . Between these interfaces dhcp request then will be forwared. As long as you can not use a kind of virtual ipsec interface in the dhcp relay configuration you must write complex S-NAT/D-NAT rules (if possible) on the interface which is connected to the WWW because this is the interface which handles the traffic for the net2net tunnel.

I would be interested in discussing my opinion. I am right or I am wrong? Has anyone done writing S-NAT/D-NAT for DHCP requests? Any hints?

Thanks a lot!

Jochen
Cancel
Vote Up 0 Vote Down

Cancel
0 Marvin_B over 18 years ago in reply to jschmitt76

I contacted Astaro support and was told dhcp relay will not work over site to site vpn.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Marvin_B over 18 years ago in reply to jschmitt76

I contacted Astaro support and was told dhcp relay will not work over site to site vpn.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Suppentrulli over 18 years ago in reply to Marvin_B

Hello Astaro,

i just want to know if it is not possible to relay DHCP via IPSec-tunnels in general or if it is just not implemented in V7. If it's just not offered in V7, are there any plans to implement it?
Cancel
Vote Up 0 Vote Down

Cancel