Cisco DHCP server & VRF

I had some issues while configuring some VRF’s on a Cisco router and using that router as a DHCP server. First of all the router wasn’t binding any DHCP request. The DHCP server configuration is defined below.

ip dhcp pool guest
vrf vrf-guest

The configuration of the DHCP server is very straightforward. Exception is the use of the VRF interface to bind the DHCP server to. With this configuration the DHCP server isn’t working, because no IP addresses are bind to clients.

The magic to get DHCP working is found in the command ip dhcp use vrf connected. More information about the command can be found here or here.

The second issue is about configuring some IP address exclusions for the configured pool. This can be done via the command ip dhcp excluded-address vrf <vrf-name> <first ip-address> <last ip-address> (info). Depending on the IOS version used, this command isn’t available in CLI. I had this issue with the CIsco 2811 I was using, so I tried to ip dhcp class command. I added the following to the configuration of the DHCP server.

ip dhcp class dhcp_class_unsecure
remark limit IP addresses
ip dhcp pool unsecure
vrf unsecure
class dhcp_class_unsecure
address range

This isn’t exactly the same as configuring IP exclusions, because the ip dhcp class command is used to group clients on specific characteristics. Clients that match these characteristics are assigned an IP address from the specific class. In my situation the use of the ip dhcp class command fixed the problem.

The following two tabs change content below.
René Jorissen works as Solution Specialist for 4IP in the Netherlands. Network Infrastructures are the primary focus. René works with equipment of multiple vendors, like Cisco, Aruba Networks, FortiNet, HP Networking, Juniper Networks, RSA SecurID, AeroHive, Microsoft and many more. René is CCNA (Routing & Switching, Security), CCNP , Aruba Certified Mobility Expert (ACMP), Aruba Certified ClearPass Professional (ACCP), FCNSP and CEFFS certified. You can follow René on Twitter and LinkedIn.

Latest posts by René Jorissen (see all)

2 thoughts on “Cisco DHCP server & VRF

  1. Hi,

    Since you ever configure Citrix, I want to share my experience with Cisco Switch DHCP pool.
    Yesterday I encounter 1 problem which KMS server can’t update win7 license.
    I found out that because AD DNS have wrong client ip.
    So in order for Switch DHCP to working correctly, it need to tell AD DNS to update client ip. In other word it need to support DDNS.
    I haven’t found article on how to configure DDNS dhcp in Switch except router.
    My switch is Catalyst 4507.
    If you found please email me.
    Greetings from Brunei

Leave a Reply

Your email address will not be published. Required fields are marked *