Cisco ASA Series Cli Configuration Manual page 520

Configuring a DHCP Server
Enabling the DHCP Server
To enable the DHCP server on an ASA interface, perform the following steps:
Command
Step 1
dhcpd address ip_address-ip_address
interface_name
Example:
hostname(config)# dhcpd address
10.0.1.101-10.0.1.110 inside
Step 2
dhcpd dns dns1 [dns2]
Example:
hostname(config)# dhcpd dns 209.165.201.2
209.165.202.129
Step 3
dhcpd wins wins1 [wins2]
Example:
hostname(config)# dhcpd wins 209.165.201.5
Step 4
dhcpd lease lease_length
Example:
hostname(config)# dhcpd lease 3000
Step 5
dhcpd domain domain_name
Example:
hostname(config)# dhcpd domain example.com
Step 6
dhcpd ping_timeout milliseconds
Example:
hostname(config)# dhcpd ping timeout 20
Step 7
dhcpd option 3 ip gateway_ip
Example:
hostname(config)# dhcpd option 3 ip
10.10.1.1
Step 8
dhcpd enable interface_name
Example:
hostname(config)# dhcpd enable outside
Cisco ASA Series CLI Configuration Guide
1-4
Purpose
Creates a DHCP address pool. The ASA assigns a client one of the
addresses from this pool to use for a given period of time. These
addresses are the local, untranslated addresses for the directly
connected network.
The address pool must be on the same subnet as the ASA
interface.
(Optional) Specifies the IP address(es) of the DNS server(s).
(Optional) Specifies the IP address(es) of the WINS server(s).
You can specify up to two WINS servers.
(Optional) Changes the lease length to be granted to the client.
The lease length equals the amount of time in seconds that the
client can use its allocated IP address before the lease expires.
Enter a value from 0 to 1,048,575. The default value is 3600
seconds.
(Optional) Configures the domain name.
(Optional) Configures the DHCP ping timeout value for ICMP
packets. To avoid address conflicts, the ASA sends two ICMP
ping packets to an address before assigning that address to a
DHCP client.
Defines a default gateway that is sent to DHCP clients. If you do
not use the dhcpd option 3 command to define the default
gateway, DHCP clients use the IP address of the management
interface. As a result, the DHCP ACK does not include this
option. The management interface does not route traffic.
Enables the DHCP daemon within the ASA to listen for DHCP
client requests on the enabled interface.
Chapter 1 Configuring DHCP