1

We have a DHCP pool configured on Cisco L3 switch for hosts on SVI. Since we want to restrict connectivity to DHCP which is on the same switch.

excluded 172.24.19.1-172.24.19.50 SVI IP 172.24.19.50 DHCP gateway 172.24.19.50

Without acl the ipconfig output shows DHCP server as 172.24.19.50 Tried below acl but clients fail to get IP

permit ip any 172.24.19.0 0.0.0.255

permit ip 0.0.0.0 255.255.255.255 172.24.19.50 0.0.0.0

Direction- IN on SVI

what acl should be defined on vlan interface.

1

To allow DHCP:

ip access-list extended ACL-DHCP-NET
permit udp any host 255.255.255.255 eq 67 68
<other rules>

To reject DHCP:

ip access-list extended ACL-STATIC-NET:
deny udp any host 255.255.255.255 eq 67 68
<other rules>

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.