Can't pull an IP address via DHCP

I recently replaced a legacy 6513 with a 4510R+E running cat4500es8-universalk9.SPA.03.03.00.XO.151-1.XO.bin
Upon booting up a handful of workstations connected to the 4510 are unable to pull IP addresses. Once booted up, if you unplug and then plug the network cable back into workstation it pulls an IP address.
The config is pretty vanilla. The only thing I did that I wouldn't usually do was add this command "ip device tracking probe delay 5" to address this issue... https://supportforums.cisco.com/discussion/11621386/ise8021x-ip-conflict-0000 I get the same results even if I remove this command
Any suggestions?

Thanks for your input.
Portfast is configured globally. Just to be double certain I even configured it on the inteface.but it made no difference.

Similar Messages

Clients can not obtain an ip-address via DHCP.

HI all, I would like to share one problem with WLC 5508 .
we added a new virtual interface on the WLC. One new SSID is associated with this interface.
We created a ACL for this interface to restrict the access via WIFI to certian services.
The following services are allowed on this ACL:
TCP-Traffic for HTTPS
UDP-Traffic for DNS
UDP-Traffic for DHCP
TCP-Traffic for HTTP
ICMP-Traffic
TCP-Traffic for CITRIX
The Problem is, as soon as we add a new service to this ACL, we need to reboot the Controller because the Clients which are working over WIFI do not get a IP-Address assigned via DHCP.
It´s not correct that everything works fine because the change were not applied.
The changes of the ACL are applied on the fly, but for reason we don´t know, the clients don´t get a DHCP IP-Address (after changing the ACL) until the Controller is rebooted.
I am attaching configruation from affected wlc
thank you

If shop is coming from a server on the LAN you need to add DHCP as a port they can reach.
Steve
Sent from Cisco Technical Support iPhone App

WRT54G: Static mode set on WAN side, but still sometimes pulls address via DHCP!

We've had (6) WRT54G (v5) installed in a building, for about (2) years now, with no previous problems. Now, ALL of them are doing something weird. They are all set for Static mode on the WAN side (we have static ip addresses for these), yet every now and then they will spontaneously pull an address via DHCP on their own. When they do this, the setting itself doesn't change. It will still show "STATIC" in the pull down list. But, the address will no longer be the address we assigned to the unit, and will instead appear to be an address that it pulled via DHCP.
Thanks, in advance, for any help and insight into this strange problem.
David

Ah. In that case, we're not going to put our client through the frustration of chasing a ghost in the machine. We'll just replace them with new ones. But, I'll try this on them in my spare time and let you know how it goes.
Thanks for your assistance,
David
Message Edited by ld-systems on 09-19-2007 08:01 AM

No IP Address via DHCP connecting to Cisco WiFi via WPA - after update

Good Evening,
We use Cisco Aeronet WiFi devices at work and use WPA security. I was able to successfully connect via my MacBook Pro until an OS update a few weeks ago. Now I can connect and it appears that I authenticate - however I cannot get a valid IP address (just a 169.x.x.x address).
I can successfully connect to open and WEP networks - but WPA is an issue.
Is this a known issue?
I have applied the latest Airport update I believe.

This is an old issue, I have yet to see a fix. I have the same problem; my MBP assigns its own IP address, and no matter what I do, it will connect to the network but not the internet. Interestingly, when I boot my iBook, which I first did to check settings (the iBook always connected easily) the MBP connected. It does this every time. As soon as the iBook boots, or wakes, the MBP does its thing, gets a valid IP address via DHCP, and connects. Even entering a manual address, will not connect the MBP to the internet. Deleting ports, and locations doesn't help.The MBP has connected on its own about three times out of (say) a hundred. Apple engineers here in Australia, said they'd never heard of the problem. Maybe they are asleep. Bah.

WRT54GS: without Windows, force a given MAC address to always get the same IP address via DHCP?

I have just now set up my WRT54GS to manage my home wireless network, and it works great. I just have one question that I haven't been able to find an answer for (forgive me if I have overlooked an obvious source of information).
I have set up the WRT54GS to be a DHCP server, and it assigns addresses in an ad hoc manner to all the devices that connect to it. In general, this is what I want, but in one case, I want a certain host to always get the same IP address, for example, 192.168.1.10.
You should know that I have no Windows machines on my network. Everything is either running Linux, MacOSX, or Symbian (on a Nokia N95 handheld). Therefore, I can't set up a static IP for my device using the software supplied on the CD that comes with my router, as that software only runs under Windows.
Using a different manufacturer's router, I am able to accomplish this by telling the DHCP software on that router to always assign 192.168.1.10 to the host who connects with a certain MAC address. I can then use this mechanism to force my specific host to always get this desired IP address. However, I haven't been able to find any way to do that with the WRT54GS without the software on the Windows-based CD. Is it possible at all? If I can indeed do this without that Windows software, could someone point me to some docs which explain how to accomplish this?
... or is there perhaps a different way to cause this to happen, perhaps by means of some sort of DHCP client ID?
Thank you very much in advance for any pointers you can give me.
Message Edited by HippoMan on 10-16-2007 05:27 PM
Take a hippopotamus to lunch today.

Forget about the CD. There is nothing on the CD which you don't configure better through the router web interface at http://192.168.1.1/ You don't need the CD. Never. I have never used the CD to configure any of my routers. The program on the CD is just a software which helps you with the initial configuration of the router. It is just a software which pretty much contacts the web interface in the background and sends some settings changes there. You can do everything yourself directly. Then you know what you change.
You have to configure the static IP address on the computer and on the computer only, e.g. on your Mac use Static IP instead of DHCP in the network preferences. Enter the IP address you want to use for the computer, the subnet mask, gateway address and DNS server(s). That's it. The router is not involved in any of this.
You just have to make sure that you use an IP address inside the LAN of the router. By default, Linksys routers use the IP address 192.168.1.1 on the LAN side for the the router. The subnet mask is 255.255.255.0. The IP address together with the subnet mask says that all IP addresses 192.168.1.0-255 are considered part of the LAN. Everything else is outside and needs to be routed to the router and from there into the internet. (If you want to know how the subnet mask works exactly read the wikipedia article on it or search for "subnet calculator" or similar in the internet)
Thus, if you connect a computer to your LAN and set a static IP address on the computer it should be inside this IP address subnet/range in order to have internet and LAN access on the computer. It does not matter which address you use as long as it is inside the IP subnet. The DHCP server on the router automatically assign a correct IP address inside the IP subnet and also automatically assigns the correct gateway address (its own address = the address to which everything should be sent which does not belong into the LAN, i.e. the internet traffic) and the DNS server. With static IP you have to assign those values yourself.
But again, there is no Windows computer or CD involved to do that nor is there any configuration on the router required to set the static IP address on the Mac. The IP address you set must simply match your LAN IP which is basically defined through the settings on the router as you want to have internet and thus need access to the router and its address 192.168.1.1.
Some routers allow you define fixed IP addresses for specific devices in the DHCP server of the router. With that function you can set a fixed IP address on the router. The computer can remain on DHCP. It will always get the IP address you have configured in the list on the router through the DHCP server. However, your Linksys router does not have this option. If any device inside your LAN is supposed to receive the same IP address at any time you have to configure that on the device only.
If you have not changed the default LAN IP address, subnet mask and DHCP server settings on the router, the router has 192.168.1.1, subnet mask 255.255.255.0 and the DHCP server uses 192.168.1.100-149 for dynamic assignments. To avoid potential address conflicts you should not use any static IP addresses inside the DHCP server address pool. This leaves you with IP addresses 192.168.1.2-99 and 150-254 as static IP addresses inside your LAN. You can pick any address you like as long as any device with a static IP address has a unique IP address inside your LAN.
Assign the subnet mask 255.255.255.0 on the computer and set the default gateway to 192.168.1.1. The DNS servers are a little bit more complicated. Generally it is better and faster if you use the DNS servers of your ISP. You can, however, also use the IP address of the router 192.168.1.1 as DNS server. The router will then operate as DNS proxy, i.e. it contacts the DNS servers of your ISP for any request from your computer.
If you want to use the DNS servers of your ISP, click on the Status tab in the router web interface. It shows you the current settings of the router on the internet port. It should show you multiple entries for DNS servers. Choose those DNS server IP addresses in the computer.
If you don't want to go through the hassle with the direct access to the DNS servers of your ISP, simple use 192.168.1.1 as only DNS server on the computer.
There are all settings you have to make on your Mac or other computers to assign a static IP address. As long as the IP address is inside 192.168.1.* it belongs to the LAN and has internet access through the router (as long as the default gateway address is 192.168.1.1 of course).
Firmware is loaded either through the web interface of the router, usually somewhere on the Administration tab or with tftp. Both ways work fine on any Mac or Linux box.

Reserver IP address via DHCP

I defined a pool of DHCP on IOS software, I want to reserve a IP address to host, I made it, only that doesn't assigned the IP address that I defined in the pool
Help? How I can to do it?
Example
ip dhcp pool guestimport all
network 172.23.12.0 255.255.255.0
default-router 172.23.12.254
address 172.23.12.231 hardware-address 0100.14c2.c6ec.42

Jorge,
First you have to create an IP dhcp pool for your clients, then for a fixed IP address create another IP dhcp pool.
Example, if your MAC is 12.34.12.34.12.34
ip dhcp pool Client1
host 172.23.12.200 255.255.255.0
client-identifier 0112.3412.3412.34
Release the IP and renew IP address and IP address 172.23.12.200 will be assign it.
Hope this helps.
Regards,
JC Arias

Phones not getting IP address via DHCP server on same VLAN

Hello....we have a new series of Cisco SF-200s and one new Cisco SF-300. All switches are operating in layer 2 mode currently. Let's say for all intents and purposes, all ports are in VLAN1....pretty much default setup. There is a fiber backbone between uplink ports...and it is working correctly it appears.
There is a DHCP server allocating addresses 192.168.0.60 thru 192.168.0.79. Subnet mask is 255.255.255.0.
PCs and laptops successfully receive an IP address and can access things.....such as surfing the internet. Tested that from multiple switches....all seems to work just fine.
However, it seems that some newly purchased phones (Digium models) simply will not acquire an IP address like the PCs and laptops do.
Pretty broad question....but just wondering.
Thanks!

Hi Greg,
Might be interesting to goto the following sections of the GUI disable the discovery protocols;
1. Administration>Discovery -LLDP >properties
2. Administration>Discovery -CDP >Management interface
3 Smartports >Properties > Admministrative Auto Smartports is disabled.
the switches are real smart and may pre-empt what you are trying to achieve.
regards dave

Can't get any IP address from DHCP, but unattributed IP adress "already in use"

Hello,
I have a mac mini with a manual IP address (192.168.1.121) which connects fine to the internet through ethernet.
When switching to DHCP instead of manual, no IP address is ever given to me (blank space after IP adress: in the network prefpane)
however, I immediately have an alert popup that says the address 192.168.1.150 is already in use.
I wonder where I could change this 192.168.1.150 address since I do not have this setting at all on this machine on any Network Port, not in Airport and not in ethernet. (I have no other network ports)
How can I change a setting that I didn't make in the first place?
The console reports the problem once every second also, and there is quite a general slowdown and beachball because of this.
I tried to renew DHCP lease but it stays blank too.
I also try to delete ethernet interface, and trash the Network configuration in the general Library, reboot, recreate it but the problem remains.
I also have reinstalled Snow Leopard and applied updates with no better luck.
Thank you very much everyone if you have a clue.

When you changed the setting to DHCP, did you click the Apply button? Also, you need to restart after changing from a manual IP address so the router can assign an unused address to the Mac when it detects it during startup.

EA2700 router not getting assigned IP address via DHCP

I'm helping my mom (remotely) set up her new EA2700 router to replace her old Linksys WRT160N router. It is currently connected to a Motorola 6121 cable modem. She also has Charter cable modem service. FYI, the WRT160N is currently working albeit it is dropping connections and losing connections from time to time. That's why she purchased this new router.
I'm trying to help her set it up manually. Unfortunately, she does not have a laptop computer. She does have an iPad and Android phone, but nothing that would allow her to connect a device with a CD to the router that would allow her to do a CD based setup. Thus, we're trying to do a manual setup.
She is able to login to the router using Safari by connecting to 192.168.1.1 so I think the basic stuff is set up properly and all the wires are connected properly. She is able to get into the main setup page. I've helped her compare the setup of the current (EA2700) router to her old WRT160N router - this took quite a while - and essentially everything is set up similarly between the old and new router. Internet connection type is set to "Automatic Configuration - DHCP." Unfortunately, the router doesn't seem to be able to get assigned an IP address from Charter. When she goes to the Status page, no IP addresses are listed. She has also clicked on both the release IP and renew IP buttons, both with no effect. She has tried power cycling both the cable modem and router, but not luck. What's going on? I see another user may have a similar issue:
http://homecommunity.cisco.com/t5/Wireless-Routers/EA2700-DHCP-reservations/m-p/561986?comm_cc=HSus&...
What can we do to fix this issue?

If mac clone is enabled, the address that it will clone is usually the mac address of the computer that can get online directly to the modem. Or it’s possible that the cable modem is only recognizing the MAC address of the old router. You may enabling MAC Address clone and clone the MAC address of the old router.

Can I use two gmail addresses via the same Mail account?

Please help! My brain is fried. I have two email addresses: one is a regular gmail one, the other uses my own domain but it's gmail too. I currently have both set up on Mail on my Mac. I receive and send from both. But I really want to have both working through one account (this is mainly to simplify the very clever Sanebox tool on both my Mac and in the Mailbox app on my iPhone).
If I forward my domain email to my regular gmail then I can receive them all in one fell swoop. Which is fine. But can I then continue to send from both accounts? Is this what they mean by an 'alias'? It's really important that I can send from both.
Sanebox suggested this: http://support.apple.com/kb/TA23485. I'm not sure I really understand it and don't want to risk changing my settings yet in case it all goes wrong.
Thank you very much!

If you're asking whether you can connect one device to two itunes store accounts, the answer is no.

CSCuh07704 - SG300 - Hosts pull incorrect IP address from DHCP server

FYI. There will be a new release of software this month.

Dear Patrick,
Thank you for the feedback to the Small Business Support Community. You are right, the CSCuh07704 has already been given the "Resolved" status by 09-22-2013 and will be covered in the new firmware release, and just to give others a better idea of what the problem was:
B>Symptom:
Hosts will obtain incorrect IP address.
Conditions:
Issue occurs when the switch is in Layer 3 mode and embedded DHCP server is enabled.
Thank you again for your commitment and please do not hesitate to reach us back if there is anything we may assist you with in the meantime.
Kind regards,
Jeffrey Rodriguez S. .:|:.:|:.
Cisco Customer Support Engineer
*Please rate the Post so other will know when an answer has been found.

Can we pull two addresses for 0Person OR 0Employee ?

Hello all,
I was checking in R/3 side in tcode PA30 that for 0EMPLOYEE there can be multiple address like permanent address, temporaray address, mailing address.
How can we pull all these address in BW system. I do not see any mapping for address field in 0EMPLOYEE and for 0PERSON i see mapping for only one address so how can that be done?
Please someone advice if they have encountered this before?
Thanks

Hi,
you can do that in multiple ways. One is to create a ods object and store all adresses related to a person in that ods. Or you can enhance the attributes of 0person or 0employee by additional address fields to post the data directly to that characteristics. But I think for both approaches you need to enhance a standard extractor or create a new one.
kind regards
Siggi

Cannot obtain DHCP IP address via ethernet for Airport Express running 7.6.4

Printer connected to LAN port on Airport Express running 7.6.4 cannot get IP address via DHCP. Airport Express is connected to an existing Wi-Fi network. Downgrading firmware version to 7.6.3 or lower resolves the issue. 100% reproducible. Tried this with 2 Airport Express devices and both had the same issue. Printer is a Star Micronics TSP 100 (point of sale receipt printer). This printer is used by almost all iPad based POS systems. It is affecting business operations.

Well I solved my own problem and it was working fine for months until Yosemite came along....
To tether my iPhone USB connection to an Airport Express Base Station (AEBS)- i did the following
1. Connect iPhone and turn on Personal Hotspot using USB
2. Going to System Preferences on the Mac click on Network
3. Set up the Ethernet setting with a static IP - (manual)
Configure IPv4 Manually -
IP Address: 192.168.2.2
Subnet Mask: 255.255.0.0
Router: 192.168.2.1
Next step is to configure the AEBS
Start from fresh -
Create a New Network
Internet Settings set to :
Connect Using: Static
IPv4 Address: 192.168.2.3
Subnet Mask: 255.255.255.0
Router Address: 192.168.2.1
DNS Servers: 192.168.2.1
Then under the Network tab the router mode is set to DHCP and NAT
It worked beautifully until recently , after the upgrade to Yosemite it was working for about 1 month and then as of yesterday it stopped working.
I am not a networking guru and I am open to suggestions on a better setup. Has anyone got this setup working too?

Router connected to cable modem by Ethernet port cannot get IP address from DHCP.

I have an ethernet cable on Fa0/0 connecting my 1841 router to my cable modem. The issue is that the router cannot obtain an IP address via DHCP when I have the "ACL-OUTSIDE-IN" ACL applied inbound on the Fa0/0 interface. I tried to allow all BOOTP and BOOTPS traffic in my ACL, but still no luck. I really don't want to run the router without a simple ACL firewall and connect it to the internet. When I take off the ACL off of Fa0/0, the router is able to get an IP address via DHCP.
Router#sh run
Building configuration...
Current configuration : 10736 bytes
! Last configuration change at 18:14:42 MST Fri Nov 16 2012 by matt.chan
version 12.4
service nagle
service timestamps debug datetime msec localtime show-timezone year
service timestamps log datetime msec localtime show-timezone year
service password-encryption
hostname Router
boot-start-marker
boot system flash:c1841-advipservicesk9-mz.124-25f.bin
boot-end-marker
logging count
logging userinfo
logging buffered 1048576 informational
enable secret 5 <removed>
aaa new-model
aaa authentication login AUTH-LOCAL local-case
aaa session-id unique
memory-size iomem 25
clock timezone MST -7
ip cef
ip nbar pdlm flash:directconnect.pdlm
ip nbar pdlm flash:citrix.pdlm
ip nbar pdlm flash:bittorrent.pdlm
ip nbar custom steam destination udp range 27000 27030
ip nbar custom rdp destination tcp range 3389 3391 55402
ip domain lookup source-interface FastEthernet0/0
ip name-server 8.8.8.8
ip inspect name fa0/0_inspect_ou icmp router-traffic timeout 10
ip inspect name fa0/0_inspect_ou ftp timeout 300
ip inspect name fa0/0_inspect_ou udp router-traffic timeout 120
ip inspect name fa0/0_inspect_ou tcp router-traffic timeout 300
login block-for 60 attempts 4 within 60
login quiet-mode access-class ACL-ACCESS-QUIET
password encryption aes
crypto pki trustpoint TP-self-signed-1755372391
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1755372391
revocation-check none
rsakeypair TP-self-signed-1755372391
crypto pki certificate chain TP-self-signed-1755372391
certificate self-signed 01
3082023F 308201A8 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31373535 33373233 3931301E 170D3132 31313137 30313130
35325A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 37353533
37323339 3130819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100D53F 9EB5B123 3103A4D5 82E786F7 F91C2DE5 9E409A22 80AF78F6 812F624A
89FE9103 73C4AAAB 13FF880D F628607D 6888AC49 18BEDD77 778F0DB1 F9A796E9
E92717CD 6DD19450 5066620A 91278C33 E38349EA 92B8C671 80761609 0AC46E6F
2C8C6BCF ABC7E1F7 A64BD28C C85477FE B23F8A7C 555ECDF9 CE461B8D 6C017370
0ED70203 010001A3 67306530 0F060355 1D130101 FF040530 030101FF 30120603
551D1104 0B300982 074E5543 4C455553 301F0603 551D2304 18301680 146CA2E0
936C651F E2ED4DCD D7025FF3 2AB029E0 95301D06 03551D0E 04160414 6CA2E093
6C651FE2 ED4DCDD7 025FF32A B029E095 300D0609 2A864886 F70D0101 04050003
8181004A AFA4D07C 1424DE0E EF3F17F2 BB1EA63B CB17C13D 1AEA31A1 BAB6AF77
DB6EA8A2 2117DCD1 5530A18C 3618D568 CC7EF520 E039ACBD DA906352 BB7E51BD
0954490C B2AB30C2 FBBE4738 C214BE1C CB63FFEA BAFC46E0 3DC419EE 714B9ABD
144A21E3 3E54C103 FF47FAF1 412FE5C4 59ACD1FE FD72356B C8DC04C3 E2EDF275 45954C
quit
username <removed secret 5 <removed>
ip ssh maxstartups 10
ip ssh time-out 60
ip ssh authentication-retries 2
ip ssh port 2226 rotary 1
ip ssh version 2
class-map match-all Zuri-YouTube-Class
match access-group name NAT-Pool-Zuri-WLAN
match protocol http host "*youtube.com*"
policy-map PMAP-QOS-VTI-IN
description QOS FOR TU0
class class-default
shape peak 1512000
policy-map PMAP-QOS-VTI-OUT
description QOS FOR TU0
class class-default
shape peak 512000
crypto isakmp policy 1
encr aes 256
authentication pre-share
group 5
lifetime 43200
crypto isakmp key 6 <removed> address <removed>
crypto isakmp invalid-spi-recovery
crypto isakmp keepalive 10 5 periodic
crypto ipsec transform-set EDGE-TS ah-sha-hmac esp-aes 256
crypto ipsec profile EDGE
set security-association lifetime kilobytes 256000
set transform-set EDGE-TS
set pfs group5
interface Loopback0
no ip address
interface Tunnel0
description "VTI Link"
bandwidth 4000
ip address 172.20.0.2 255.255.255.0
ip mtu 1400
ip nbar protocol-discovery
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1360
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 7 12090011003E5A0C0F186E752220211B4A
keepalive 10 5
tunnel source FastEthernet0/0
tunnel destination <removed>
tunnel mode ipsec ipv4
tunnel path-mtu-discovery
tunnel protection ipsec profile EDGE
service-policy output PMAP-QOS-VTI-OUT
hold-queue 75 out
interface FastEthernet0/0
description "Link to ISP"
bandwidth 4000
ip address dhcp
ip access-group ACL-OUTSIDE-IN in
no ip proxy-arp
ip nbar protocol-discovery
ip nat outside
ip inspect fa0/0_inspect_ou out
ip virtual-reassembly
ip ospf cost 1
duplex auto
speed auto
no keepalive
no cdp enable
interface FastEthernet0/1
description "Link to LAN"
ip address 172.16.0.1 255.255.255.248
ip access-group ACL-INSIDE-IN in
no ip proxy-arp
ip nbar protocol-discovery
ip nat inside
ip virtual-reassembly
ip ospf cost 1
ip ospf priority 255
duplex auto
speed auto
no keepalive
router ospf 1
log-adjacency-changes
redistribute static subnets
passive-interface default
no passive-interface Tunnel0
network 172.20.0.0 0.0.0.3 area 0
ip forward-protocol nd
ip route 10.0.0.0 255.0.0.0 Null0 name "Class A Private"
ip route 172.16.0.0 255.240.0.0 Null0 name "Class B Private"
ip route 172.17.0.0 255.255.0.0 FastEthernet0/1 172.16.0.2 name "Home WLAN"
ip route 172.19.73.31 255.255.255.255 Null0
ip route 172.27.0.0 255.255.0.0 Tunnel0 172.20.0.1 name "IPsec GRE Tunnel"
ip route 192.168.0.0 255.255.0.0 Null0 name "Class C Private"
ip route 192.168.0.0 255.255.255.0 Tunnel0 172.20.0.1 name "VLAN 70"
ip route 192.168.100.1 255.255.255.255 FastEthernet0/0 70.162.0.1 permanent name "CABLE MODEM MANAGEMENT"
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0 dhcp 253
ip dns server
no ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat translation tcp-timeout 300
ip nat translation udp-timeout 120
ip nat translation max-entries 2048
ip nat inside source list ACL-NAT-172.16.0.0/29 interface FastEthernet0/0 overload
ip nat inside source list ACL-NAT-MANAGEMENT interface FastEthernet0/0 overload
ip nat inside source static tcp 172.16.0.4 22 interface FastEthernet0/0 2227
ip nat inside source static tcp 172.16.0.5 3389 interface FastEthernet0/0 3391
ip nat inside source static tcp 172.16.0.3 3389 interface FastEthernet0/0 3390
ip nat inside source static tcp 172.16.0.4 80 interface FastEthernet0/0 8084
ip access-list standard ACL-ACCESS-QUIET
permit 216.161.180.16
permit 172.16.0.0 0.1.255.255
permit 172.27.0.0 0.0.127.255
permit 172.20.0.0 0.0.0.3
ip access-list standard ACL-NAT-172.16.0.0/29
permit 172.16.0.0 0.0.0.7
ip access-list standard ACL-NAT-172.17.0.0/24
permit 172.17.0.0 0.0.0.255
ip access-list standard ACL-NAT-172.17.1.0/24
permit 172.17.1.0 0.0.0.255
ip access-list standard ACL-SNMP
permit 172.16.0.4
ip access-list extended ACL-CRY-MAP
ip access-list extended ACL-INSIDE-IN
deny   ip host 172.16.0.2 172.27.0.0 0.0.127.255
deny   ip host 172.16.0.2 172.20.0.0 0.0.0.3
permit ip 172.17.0.0 0.0.0.255 any
permit ip 172.16.0.0 0.0.0.7 any
permit ip 172.17.1.0 0.0.0.255 any
ip access-list extended ACL-NAT-MANAGEMENT
permit tcp host 172.27.10.11 eq 3389 host 72.166.77.196
ip access-list extended ACL-OUTSIDE-IN
deny   ip 10.0.0.0 0.255.255.255 any
deny   ip 172.16.0.0 0.15.255.255 any
deny   ip 192.168.0.0 0.0.255.255 any
permit tcp any any range 3390 3391
permit udp any any eq bootpc
permit udp any any eq bootps
permit tcp any any range 2226 2228
permit tcp any any range 8081 8084
permit icmp any any echo
permit icmp any any net-unreachable
permit icmp any any host-unreachable
permit icmp any any port-unreachable
permit icmp any any parameter-problem
permit icmp any any packet-too-big
permit icmp any any administratively-prohibited
permit icmp any any source-quench
permit icmp any any ttl-exceeded
deny   icmp any any
deny   ip any any
ip access-list log-update threshold 10
logging history informational
logging trap debugging
logging 172.17.228.17
logging 172.17.228.10
control-plane
line con 0
exec-timeout 15 0
privilege level 15
logging synchronous
login authentication AUTH-LOCAL
line aux 0
login authentication AUTH-LOCAL
line vty 0 4
exec-timeout 60 0
privilege level 15
logging synchronous
login authentication AUTH-LOCAL
rotary 1
transport input ssh
scheduler allocate 20000 1000
ntp clock-period 17178311
ntp source FastEthernet0/0
ntp server 148.167.132.201
end

Hi Matt,
Try adding below line
ip access-list extended ACL-OUTSIDE-IN
permit udp any eq bootpc any eq bootps
Regards
Najaf
Please rate when applicable or helpful !!!

Can't get an IP address (but I used to be able to...)

Hi, I have a strange problem with my Airport Express. I've been using the airport for months with two laptop PCs. Went away past weekend and used one laptop on a different wireless network, came back, and now this laptop can't pull an IP address from the AX. The weird thing is that my wife's laptop is still pulling an IP address from the AX just fine. My own laptop is pulling IP addresses from my neighbor's wireless network and my work network okay, just not from my AX. I've tried releasing the IP address from my laptop, but it won't pull a new one from the AX.
I don't know what's wrong. I have the AX setup for "share a single IP address" and this worked just fine until two days ago. I haven't changed any settings on my PC, it's still set to obtain an IP address automatically.
Can anyone provide help/insight?
Thanks!

Okay, I have figured out the answer to my question... and it was really simple. I had mis-entered my WEP password. I did not realize this because windows indicated that I was connected to the base station, and no error message appeared after I mis-entered the password.
So for all those who can't get their AX to assign an IP address - be sure your WEP password is entered correctly!

Can't pull an IP address via DHCP

Similar Messages

Maybe you are looking for