PIX 501 as a DHCP proxy

Dec 20, 2005 1 Replies

Hello,



Behind a PIX 501 (PIX 6.3.5), a private network.



Here is the part of the config to get the inside hosts their IP through DHCP



dhcpd address 172.26.88.2-172.26.88.6 inside dhcpd dns 195.238.10.10 195.238.10.11 dhcpd lease 172800 dhcpd ping_timeout 750 dhcpd domain company.net dhcpd enable inside



The firewall inside IP is 172.26.88.1



Rather than 195.238.10.10 195.238.10.11 as the DNS IP the clients'd have, I'd like to have the inside IP of the firewall.



How to do it?



Thank You,



Raphael


Don't specify a dhcpd dns at all, and configure your outside interface for "ip address dhcp setroute". PIX 6.x can pass on DNS information it has been told by the DHCP server used to set its outside IP.

I do not recall that there is any way to configure the PIX to act as a DNS relay in any other setup. In particular, there is no way to configure something that might look like "dhcpd proxy-dns 195.238.10.10" as a dns server that the PIX should use when it receives a DNS request on the inside interface.

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required