Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations TouchToneTommy on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

DHCP and ACL

Status
Not open for further replies.

Namekian

IS-IT--Management
Nov 5, 2004
56
US
I am having an issue with setting up DHCP and ACL on an ethernet port. I am using a Cisco 2621 router.
(I am doing this not from a copy paste, so if the commands a little off it is because of that)
ip dhcp pool test
network 192.168.1.0
default-router 192.168.1.1
int lo0
ip add 1.1.1.1 255.0.0.0
int fa0/1
ip add 192.168.1.1 255.255.255.0
no shut
ip access-group test in

ip access-list extended test
permit tcp any any eq 67
permit ip host 192.168.1.3 host 1.1.1.1


Basically I am trying to take a network and allow only certain ips within that network to go out a certain external IP, simulated by the loopback interface. However, when I place both the ACL and the DHCP on the port, the DHCP gets cancelled out. Do I have it set for the wrong port?


 
DHCP is UDP not tcp, try chaging that first and it may allow it to pass correctly. I think the other ACL may not be quite correct either, I would probably write it like

remark This is DHCP source port. (Bootps/DHCP)
permit udp any any eq 67
remark This is DHCP destination port(Bootpc/DHCP)
permit udp any any eq 68
permit ip host 192.168.1.3 any
deny any any

I think that should do it.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top