No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Configure the DHCP based on interface and global DHCP at the same time, leading to PC cannot normally receive IP address

Publication Date:  2012-10-29 Views:  59 Downloads:  0
Issue Description
In USG5530 firewall configured DHCP to automatically assign IP address. SW enabled Layer 3 function, and configure DHCP trunk. The computer under SW through the SW trunk can not automatically receive IP address. The network topology is as following:
Alarm Information
none
Handling Process
1, The other computers under SW can not receive IP address, directly connect the computer to USG5500, can normally receive IP address.
2, check USG5500 firewall and SW configuration, no problem.
3, check the state of IP address has been assigned: OFFERED, which is the server the response to DHCPDISCOVER message, as shown below:
[USG5500]dis dhcp server ip-in-use a
20:20:48  2012/06/05
Global pool:
IP address        Hardware address    Lease expiration            Type
192.168.8.23      f0de-f1eb-3a38      2012-06-05 20:21:48         Auto:OFFERED
192.168.8.22      14e6-e4c9-91f7      2012-06-05 20:21:46         Auto:OFFERED
192.168.8.33      0021-0075-cf12      2012-06-05 20:21:43         Auto:OFFERED
192.168.2.22      0024-2ce5-1c3a      2012-06-05 20:21:46         Auto:OFFERED
192.168.8.21      0025-8696-1836      2012-06-05 20:21:46         Auto:OFFERED
192.168.3.24      0021-6b12-ae4a      2012-06-05 20:21:47         Auto:OFFERED
192.168.8.26      0017-c4bc-1575      2012-06-05 20:21:47         Auto:OFFERED
Open DHCP DEBUG information,and they are on receiving state all the time:
*0.99667070 USG5500 DHCPS/7/DHCPS_DEBUG_COMMON:
DhcpServer: receive DHCPDISCOVER from 001C-7B76-D4CE through 192.168.8.1
*0.99667070 USG5500 DHCPS/7/DHCPS_DEBUG_COMMON:
DhcpServer: Sending ICMP ECHO to Target IP: 192.168.8.32
*0.99667070 USG5500 DHCPS/7/DHCPS_DEBUG_COMMON:
DhcpServer:Assigned Used Lease
*0.99667070 USG5500 DHCPS/7/DHCPS_DEBUG_COMMON:
DhcpServer: ICMP Timeout
*0.99667070 USG5500 DHCPS/7/DHCPS_DEBUG_COMMON:
DhcpServer: Still Need to ICMP detect for 1 times
*0.99667070 USG5500 DHCPS/7/DHCPS_DEBUG_COMMON:
DhcpServer: Sending ICMP ECHO to Target IP: 192.168.3.25
*0.99667070 USG5500 DHCPS/7/DHCPS_DEBUG_COMMON:
DhcpServer: receive DHCPREQUEST from 0017-C4BC-1575 through 192.168.8.1
*0.99667070 USG5500 DHCPS/7/DHCPS_DEBUG_COMMON:
DhcpServer: NAK user's Lease                                  //no reply user's Lease
*0.99667070 USG5500 DHCPS/7/DHCPS_DEBUG_COMMON:
DhcpServer: Send DHCPNAK to MAC=> 0017-C4BC-1575 Offer IP=> 0.0.0.0
*0.99667070 USG5500 DHCPS/7/DHCPS_DEBUG_COMMON:
DhcpServer: ICMP Timeout
*0.99667070 USG5500 DHCPS/7/DHCPS_DEBUG_COMMON:
DhcpServer: All Try finished
*0.99667070 USG5500 DHCPS/7/DHCPS_DEBUG_COMMON:
DhcpServer: Send DHCPOFFER to MAC=> C83A-35C8-26FA Offer IP=> 192.168.2.21 through 192.168.2.1
*0.99667070 USG5500 DHCPS/7/DHCPS_DEBUG_COMMON:
DhcpServer: receive DHCPREQUEST from C83A-35C8-26FA through 192.168.2.1
*0.99667070 USG5500 DHCPS/7/DHCPS_DEBUG_COMMON:
DhcpServer: NAK user's Lease
*0.99667080 USG5500 DHCPS/7/DHCPS_DEBUG_COMMON:
DhcpServer: Send DHCPNAK to MAC=> C83A-35C8-26FA Offer IP=> 0.0.0.0
*0.99667080 USG5500 DHCPS/7/DHCPS_DEBUG_COMMON:
DhcpServer: ICMP Timeout
*0.99667080 USG5500 DHCPS/7/DHCPS_DEBUG_COMMON:
DhcpServer: All Try finished

4, through checking firewall configuration again, find that firewall configure the DHCP based on the interface and global DHCP at the same time. in this situation, the DHCP based on the interface has a higher priority that the global DHCP, and modify the DHCP state to be global under the interface, the CLIENT can normally receive IP address. The distribution IP address is as follows:
[USG5500]dis dhcp server  ip-in-use a
20:29:58  2012/06/05
Global pool:
IP address        Hardware address    Lease expiration            Type
192.168.8.22      14e6-e4c9-91f7      2012-06-05 22:29:50         Auto:COMMITED
192.168.2.22      0024-2ce5-1c3a      2012-06-05 22:29:50         Auto:COMMITED
192.168.8.21      0025-8696-1836      2012-06-05 22:29:49         Auto:COMMITED
192.168.3.24      0021-6b12-ae4a      2012-06-05 22:29:49         Auto:COMMITED
192.168.8.26      0017-c4bc-1575      2012-06-05 22:29:49         Auto:COMMITED

Root Cause
1, PC problem
2, configuration problem
Suggestions
none

END