I try to use asa 5508 on my network with 480 workstations.I connect interface1( to a swith with 3 linux servers,interface 2( ( to a 48 manged switch, interface 3 ( and interface 4( and interface 5 (,Of course each segment has swith and ap connected to it.ASA 5508 act as dhcp server in each segment.It works for a day or so, then stop no one can access to the internet nor the server.My question is :Is it the right way to use asa 5508 as dhcp server for 480 clients? Can I use my linux server on dmz to be a main dhcp server for the other interfaces? Thanks for your help!!

  • you don't have anything in ASA's logs? do you run the latest ASA software?
    – JFL
    May 16 '16 at 13:38
  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer.
    – Ron Maupin
    Aug 14 '17 at 3:58

You can and it would be better to use a DHCP Linux server for your entire network. I would place it in your Linux DMZ/interface 1.

Keep in mind that as DHCP was designed as a network broadcast domain protocol, the DHCP requests have to be forwarded to your DHCP server; at the moment you have a different design, which is known as a multi homed DHCP server.

As such you have to configure DHCP relaying in each network. DHCP relaying will forward DHCP requests from each network to the specified DHCP server.

ASA DHCP Relay Configuration Example

I would also start planning the future evolution and data usage of your network (in 2-3 years time, maybe sooner). Albeit the theoretical backplane of the 5508 is 8Gbps, depending on the firewall and NAT rules, often with ASA equipments, the speed the backbone withstands can get to half of that.

  • Thanks for suggestions, I will try this asap and see if it solve my issues. May 16 '16 at 9:40

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.