topic RE: Acl for dhcp packet forwarding. in ExtremeCloud IQ- Site Engine Management Center

Acl for dhcp packet forwarding.

Justsomebodi — Thu, 15 Jun 2017 23:56:00 GMT

Does anyone have some pointers to creating a script that will forward DHCP packets to a EAC appliance in a layer 2 Network?

RE: Acl for dhcp packet forwarding.

Jeremy_Gibbs — Fri, 16 Jun 2017 00:04:00 GMT

What are you trying to do? Will this help?
https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-configure-Bootprelay

RE: Acl for dhcp packet forwarding.

Ryan_Yacobucci — Fri, 16 Jun 2017 06:25:00 GMT

Hello,

You could run a link to eth2 and extend the VLAN to eth2 of the NAC and put the interface in listening mode.

If NAC is in the name VLAN as the clients it should already be able to get see the DHCP request.

Thanks
-Ryan

RE: Acl for dhcp packet forwarding.

Justsomebodi — Fri, 16 Jun 2017 13:27:00 GMT

Hi

Thanks for the replies. The vlan is not routable so bootp doesn't work. The NAC is actually in a different building and different set of VLAN's.

RE: Acl for dhcp packet forwarding.

Ryan_Yacobucci — Sun, 18 Jun 2017 03:41:00 GMT

Hello,

Even though the NAC is in another building is there anyway to extend the VLAN to a separate NIC on the NAC? The NAC's additional NIC can act as a passive Network sniffer to sniff the broadcast request packets.

Thanks
-Ryan

RE: Acl for dhcp packet forwarding.

Justsomebodi — Mon, 19 Jun 2017 15:39:00 GMT

Problem is, we have multiple VLAN's that don't route.

RE: Acl for dhcp packet forwarding.

Ryan_Yacobucci — Mon, 19 Jun 2017 17:14:00 GMT

As long as it's possible to extend each VLAN to the NAC's 2nd NIC it can listen on multiple VLANs. You're basically extending the broadcast domain for each VLAN to include a listening only interface on the NAC that will see the DHCP requests as they are broadcast packets.

Thanks
-Ryan

RE: Acl for dhcp packet forwarding.

Justsomebodi — Mon, 19 Jun 2017 17:24:00 GMT

Hi

Thanks for the reply. So based on that, i could remove bootp off the core and simply extend all vlan's onto the NAC listening port?

Regards

RE: Acl for dhcp packet forwarding.

Ryan_Yacobucci — Mon, 19 Jun 2017 17:30:00 GMT

Correct,

Run a cable from the core to NAC's Eth1 port.

Then in NAC Manager click on the NAC --> Configuration Tab --> Click the "Edit" button under the interface Summary box

Even if the client authenticates to another NAC in the Appliance group and the DHCP request is seen on this NAC there is NAC to NAC communication to resolve and populate the information accordingly.

Thanks
-Ryan