DHCP Forwarding

[Alex]

We have a VLAN that we want isolated from the rest of the network (hosts on this VLAN can only talk to hosts on same VLAN). The problem is, we also want DHCP on this VLAN (traffic should get out of that VLAN just to get DHCP addresses from our server). I have enabled bootprelay on the core router. The problem is: if I enable IPForwarding on this VLAN, it won't be isolated anymore.

Is there a way to keep IPForwarding disabled while routing DHCP traffic only?

Thanks in advance.

[BradP]

Hi Alex,

You would have to have a separate DHCP server for that vlan. One option is to enable it on the router or firewall--just for that vlan.

Thanks
Brad

[Alex]

Brad, we were actually able to convince management to setup DHCP services in the core routers just for this VLAN. We've configured and tested this; all looking good.

TY

[Alex]

Thanks for the input Brad. However, having a separate DHCP for that VLAN is not an option, as we want to manage IPs on that scope with our campus DHCP server.