topic DHCP Relay - i don't think i'm doing this right in General Topics

DHCP Relay - i don't think i'm doing this right

Rccou — Wed, 04 Mar 2020 19:29:39 GMT

Hi Everyone,

I'm trying to configure my Checkpoint R80.30 ClusterXL to act as a DHCP relay for clients on a VLAN interface.

I don't think i'm doing it right because it's not working.

I have configured a DHCP relay in each FW using GAIA with the FW interface as the Primary address and the "Relay to Server" using the IP of the DHCP server. - Should i be using the Cluster VIP, or does this not matter?

I have configured a rule for any source to 255.255.255.255 DHCP-request

and

a rule for the client subnet to the dhcp servers using DHCP-request

I have also configured a rule for the FW interface(s) + VIP to 255.255.255.255 and to the client subnet using DHCP -reply

and another rule for the DHCP server IP to 255.255.255.255 and to the client subnet using DHCP -reply

I'm not seeing any hits on these rules and the client is not getting a DHCP IP.

What am i doing wrong, or not doing?

Re: DHCP Relay - i don't think i'm doing this right

Maarten_Sjouw — Wed, 04 Mar 2020 22:45:20 GMT

Did you check the SK for DHCP using the new services?

Re: DHCP Relay - i don't think i'm doing this right

wislley — Thu, 05 Mar 2020 04:22:51 GMT

Hello. Follow sk104114.

In addition to other checks you need to configure 4 firewall rules using the image below as an example.

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk104114