60-90
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 60 Router Device Administration
DHCP on Cisco IOS Routers
Note Secured ARP disables dynamic ARP learning on an interface.
Related Topics
•Understanding DHCP Database Agents, page 60-88
•Understanding DHCP Relay Agents, page 60-88
•Understanding DHCP Option 82, page 60-89
•Defining DHCP Policies, page 60-90
•DHCP on Cisco IOS Routers, page 60-87
Defining DHCP Policies
When you configure a DHCP policy, you must define the IP address pools for the server to use to provide
addresses to DHCP clients. In addition, you can optionally define the following:
•External DHCP database agent.
•IP ranges to exclude from DHCP.
•DHCP relay parameters.
Note When configuring DHCP on a Cisco IOS router, make sure that the router does not contain an access
rule denying Bootstrap Protocol (BootP) traffic. Having such a rule blocks DHCP traffic from being
transmitted.
Related Topics
•DHCP on Cisco IOS Routers, page 60-87
Step 1 Do one of the following:
•(Device view) Select Platform > Device Admin > Server Access > DHCP from the Policy selector.
•(Policy view) Select Router Platform > Device Admin > Server Access > DHCP from the Policy
Type selector. Select an existing policy or create a new one.
The DHCP Policy page is displayed. See Table60-38 on page 60-92 for a description of the fields on
this page.
Step 2 (Optional) Under Databases, click the Add button to display the DHCP Database Dialog Box,
page 60-94. From here you can define external DHCP database agents. For more information, see
Understanding DHCP Database Agents, page 60-88.
Step 3 (Optional) Under Excluded IPs, enter the IP addresses or address ranges within a DHCP address pool
that should not be made available to DHCP clients. You can use a combination of addresses and
network/host objects, or click Select to display a selector. For more information, see Specifying IP
Addresses During Policy Definition, page 6-81.
Tip If the network you want is not listed in the selector, click the Create button to display the Add
or Edit Network/Host Dialog Box, page 6-77. From here you can create a network/host object.