topic Re: DHCP relay option 77 (userClassID) - how to do? in Firewall and Security Management

DHCP relay option 77 (userClassID) - how to do?

DirkB — Thu, 12 Jan 2023 00:12:09 GMT

Hello,

we have ClusterXL SGW R.81.10 with DHCP relay enabled, basically it works fine.

But for some structuring, we need various gradations in the DHCP scope, which can easily be done with UserClassID (option 77). At the client the option 77 can be seen in DHCP request (without errors) in Wireshark, but the Checkpoint DHCP relay apparently does not transmit this option 77, at the DHCP server only the option 60 (vendorClassID) arrives, not option 77. I have not found anything special in the documents, only in https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk41453 ...

The parameter "om_extended_dhcp_params" is enabled (so according to this source also the option 77 should be supported (forwarded) ... are there further necessary settings? What am I missing? I would be surprised if this is not supported

Thanks for your support

Re: DHCP relay option 77 (userClassID) - how to do?

the_rock — Wed, 11 Jan 2023 23:50:58 GMT

Im pretty sure it should be supported. Let me do some testing in my lab Thursday, as I dont have access to it at the moment.

Re: DHCP relay option 77 (userClassID) - how to do?

DirkB — Thu, 12 Jan 2023 00:07:22 GMT

By the way, there is an error in the article https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut... ... , the command "ipconfig /setclassid adapter [classid]" does not set option 60 (vendorClassID), instead option 77 (userClassID) - if you don't believe it, do Wireshark 😉 ... Option 60 (vendorClassID) is e.g. with Microsoft always "MSFT 5.0" by default.

Who corrects the articles in the database?

Re: DHCP relay option 77 (userClassID) - how to do?

the_rock — Thu, 12 Jan 2023 00:07:14 GMT

I believe it, as I gave feedback about it before and it was never fixed. I think it goes to someone in Israel, who, no clue.

Re: DHCP relay option 77 (userClassID) - how to do?

DirkB — Thu, 12 Jan 2023 00:16:26 GMT

Thank you @the_rock !

Re: DHCP relay option 77 (userClassID) - how to do?

the_rock — Thu, 12 Jan 2023 00:23:17 GMT

For you, no charge 😉

Re: DHCP relay option 77 (userClassID) - how to do?

PhoneBoy — Thu, 12 Jan 2023 16:09:50 GMT

The SecureKnowledge team is responsible for addressing any feedback left in SK articles.
They are usually pretty prompt at corrections unless it requires some extra validation from R&D.

Re: DHCP relay option 77 (userClassID) - how to do?

DirkB — Thu, 12 Jan 2023 18:55:57 GMT

Ok, thank you, I've left this as short feedback in the article.

Any hints for DHCP option 77 with Checkpoint relay? thx.

Re: DHCP relay option 77 (userClassID) - how to do?

Georgios_Sagos — Mon, 17 Mar 2025 12:36:16 GMT

Hello, was this ever resolved, I see a DHCP discover with option 77 not being relayed on a 1500 with R81.10.10?