thebajaguy
Premium
join:2006-01-06
Oaklyn, NJ | reply to lonebandit
Re: [Config] access-list, dhcp
I dug back into the discussions and saw a note about UDP port 67 being DHCP related communications. I didn't confirm it with another source, so I'd suggest you check it out further. |
|
lonebandit
join:2001-12-01
Oak Creek, WI | yea...I figured something like this should be needed....but wasnt sure.
So I am on the right track 
-JD |
|
Phraxos
Premium
join:2004-06-12
UK
1 edit | The way to fix these sorts of problems is to have a deny ip any any log at the end of the ACL. You trigure the problem behaviour and check the log sh log and you will see what is being blocked.
Usually you can nail it in two minutes. 
BTW it is good practice to have that line anyway at the end of the ACLs then you can always have a quick look at the log to check for suspicious behaviour.
[Edit] I could just tell you what you need for DHCP but I'm a heartless bastard and this way you will learn so much more  |
|
lonebandit
join:2001-12-01
Oak Creek, WI | I probably know what I need to add there...one or both of these:
bootps 67/udp BOOTP/DHCP server
bootpc 68/udp BOOTP/DHCP client
I just wanted an opinion about this. And I guess I got it.
-JD |
|
