Chris,

While that would certainly work, it's not the most elegant way of meeting your
requirement.

DHCP servers support different Scopes (think ranges of addresses, or different
subnets).  When you enable the 'ip helper address' on an interface supporting a
network where no DHCP or BOOTP server resides, the broadcast DHCP request is
repackaged as a unicast message with the destination address you provide in the
helper address statement.  The 'source ip address' field of that unicast packet
is the IP address of the router inteface from which the request originated, and
the DHCP uses it to determine which Scope (Pool of addresses, or Subnet range)
to allocate the new address from.

The DHCP forwards the DHCP response back to the router that handled the request,
and the router dumps it back onto the segment from which it came.

Presumably, the next step is the limit network access based on user class
(Administrative, Regular, Etc.).  Simply build your access-lists to suit your
needs.

Hope this helps,

Alan

----- Original Message -----
From: "Chris Sees" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, March 01, 2001 11:15 AM
Subject: VLANS and DHCP


> HI,
> Does anyone have suggestions for implementing DHCP in an enterprise
> environment that wants to use VLAN's (for administratve, regular users,
> etc. - for security purposes) and DHCP at the same time? It seems like you
> would need multiple DHCP servers (carefully placed). ?
> Thanks in advance.
>
>
> Chris
>
>
> _________________________________
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

_________________________________
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to