Networking: DHCP Relay over VPN tunnel
Customers uses more and more central DHCP servers therefore we need to extend the DHCP-Relay option to also support forwarding the relay requests via an established Site-to-Site tunnel. Support a centralzied DHCP configuration scenario
Showstopper to buy and use RED devices.
Adam Wilson commented
We have been unable to get this to work on our UTM9.1 box and we miss it quite badly.
Hi, is this possible now? I'm trying to setup dhcp relay via Site-to-Site (IPSec) but it doesn't work.
Marcus Hock commented
Doesn't this coutn as "implemented" now?
Elmar Haag commented
sinve v8.0, IPsec is not bound to separate ipsecX interfaces any more. It´s just bound to the physical ethX device where the tunnel ends.
So you can simply use your LAN and your WAN interface in the DHCP Relay configuration to enable dhcp relaying over the VPN tunnel. Successfully tested with 8.102..
we too are planning to roll out the ASGs to our branch offices and migrate from our managed mpls networks. The ASGs shall operate in HA and Uplink Failover modes. DHCP Relaying is really critical to us as all AD-Clients and network devices are centrally managed. Implementation of this feature will decide if we can stick to the ASG or have to watch for an other solution. RED is no option.
Gert Hansen commented
With our new RED Branch Office Security Product, this is built-in, as the branches are connected through a Layer2 VPN tunnel, which enables the whole branch office network to use the DHCP Server/Relay on the Astaro. Please check out the new RED product here an watch a 2-minute explainer video: http://www.astaro.com/landingpages/en-worldwide-innovations-2010
We are thinking to move from ASTARO 7.502 (cluser licence and 55 sattelite site) to another solution. This option is mandatory and present in smaller solution than astaro (home adsl router for example)
Where can i find the plannig of the dev trunk ?
This is a showstopper for us, every other manufacturer supports this feature, why does Ostario not?
When is this going to be implemented?