ip dhcp <dhcp_profile>
bid <branch-ID>
client-count <number>
default-router <IP-address>
dhcp-relay
dhcp-server <IP-address>
dns-server <IP-address>
domain-name <domain-name>
exclude-address <IP-address>
ip-range <Start-IP-address> <End-IP-address>
lease-time <seconds>
option <type> <value>
option82 alu
reserve {first <count> | last <count>}
server-type <type>
server-vlan <vlan-index>
subnet <IP-address-subnet>
subnet-mask <Subnet-Mask>
vlan-ip <IP-address> mask <VLAN mask>
no…
Description
This command configures DHCP assignment modes and scopes for Instant network.
Syntax
Parameter | Description | Range | Default | |||||||||||||||
ip dhcp <profile> | Creates a DHCP profile with a unique name. | — | — | |||||||||||||||
bid <branch-ID> | Defines the branch ID. NOTE: You can allocate multiple branch IDs (BID) per subnet. The IAP generates a subnet name from the DHCP IP configuration, which the controller can use as a subnet identifier. If static subnets are configured in each branch, all of them are assigned the with BID 0, which is mapped directly to the configured static subnet. | — | — | |||||||||||||||
client-count <number> | Defines the number of clients allowed per DHCP branch. NOTE: The client count configured for a branch determines the use of IP addresses from the IP address range defined for a DHCP scope. For example, if 20 IP addresses are available in an IP address range configured for a DHCP scope and a client count of 9 is configured, only a few IP addresses (in this example, 9) from this range will be used and allocated to a branch. The IAP does not allow the administrators to assign the remaining IP addresses to another branch, although a lower value is configured for the client count. | — | — | |||||||||||||||
default-router <IP-address> | Defines the IP address of the default router for the Distributed, L2 DHCP scope. | — | — | |||||||||||||||
dns-server <IP-address> | Defines the DNS server IP address. | — | — | |||||||||||||||
dhcp-relay | Enables the IAPs to intercept the broadcast packets and relay DHCP requests directly to corporate network. The DHCP relay is enabled for the centralized DHCP scopes to reduce network traffic caused by the broadcasting of DHCP requests to the corporate network. With a centralized DHCP scope, the clients in the branch are in the same subnet as clients in the corporate network. Normally the DHCP request goes through the VPN tunnel and is broadcast into the corporate network. This feature allows it to succeed without requiring to broadcast and thus reduces the network traffic. | — | — | |||||||||||||||
dhcp-server <DHCP-server-name> | Defines the IP address of the corporate DHCP server for DHCP request relay. | — | — | |||||||||||||||
domain-name <Domain-name> | Defines the domain name. | — | — | |||||||||||||||
exclude-address<IP-address> | Defines the IP address to exclude for the Local,L3 DHCP scope. The value entered in the field determines the exclusion range of the subnet. Based on the size of the subnet, the IP addresses that come before or after the IP address value specified in this field are excluded. | — | — | |||||||||||||||
ip-range <Start-IP-address> <End-IP-address> | Defines a range of IP addresses to use in the distributed,l2 and distributed,l3 DHCP scopes. You can configure a range of DHCP IP addresses used in the branches and the number of client addresses allowed per branch. You can also specify the IP addresses that must be excluded from those assigned to clients, so that they are assigned statically. You can configure up to four different ranges of IP addresses
| — | — | |||||||||||||||
lease-time <minutes> | Defines a lease time for the client in minutes. | — | 720 | |||||||||||||||
option <type> <value> | Defines the type and a value for the DHCP option to use. You can configure up to eight DHCP options supported by the DHCP server and enter the option value in "" not exceeding 255 characters. | — | — | |||||||||||||||
option82 alu | Enables the DHCP Option 82 for the Centralized,l2 DHCP scope to allow clients to send DHCP packets with the Option 82 string. | — | — | |||||||||||||||
reserve {first <count> | last <count>} | Reserves the first few and last few IP addresses in the subnet. | — | — | |||||||||||||||
server-type <type> | Defines any of the following DHCP assignment modes:
| distributed,l2, distributed,l3,local, local,l3,centralized,l2 | Local | |||||||||||||||
server-vlan <VLAN-ID> | Configures a VLAN ID for the DHCP scope. To use this subnet, ensure that the VLAN ID specified here is assigned to an SSID profile. | 1-4093 | — | |||||||||||||||
subnet <IP-address> | Defines the network IP address | — | — | |||||||||||||||
subnet-mask <subnet-mask> | Defines the subnet mask for Local, Local,L3, and distributed,l3 DHCP scopes. The subnet mask and the network determine the size of subnet. | — | — | |||||||||||||||
vlan-id <IP-address> mask <VLAN mask> | Defines the IP address and subnet mask for vlan of the DHCP server. | — | — | |||||||||||||||
no… | Removes any existing configuration. | — | — |
Usage Guidelines
Use this command to configure the DHCP address assignment for the branches connected to the corporate network through VPN. You can configure the following types of DHCP profiles.
| Distributed, L2 — In this mode, the Virtual Controller acts as the DHCP server, but the default gateway is in the data center. Based on the number of clients specified for each branch, the range of IP addresses is divided. Based on the IP address range and client count configuration, the DHCP server in the Virtual Controller controls a scope that is a subset of the complete IP Address range for the subnet distributed across all the branches. This DHCP Assignment mode is used with the L2 forwarding mode. |
| Distributed, L3 — In this mode, the Virtual Controller acts as the DHCP server and the default gateway. Based on the number of clients specified for each branch, the range of IP addresses is divided. Based on the IP address range and client count configuration, the DHCP server in the Virtual Controller is configured with a unique subnet and a corresponding scope. |
| Local — In this mode, the Virtual Controller acts as both the DHCP Server and the default gateway. The configured subnet and the corresponding DHCP scope are independent of subnets configured in other IAP clusters. The Virtual Controller assigns an IP address from a local subnet and forwards traffic to both corporate and non-corporate destinations. The network address is translated appropriately and the packet is forwarded through the IPSec tunnel or through the uplink. This DHCP assignment mode is used for the NAT forwarding mode. |
| Local, L3— In this mode, the Virtual Controller acts as a DHCP server and the gateway, and assigns an IP address from the local subnet. The IAP routes the packets sent by clients on its uplink. This mode does not provide corporate access through the IPsec tunnel. This DHCP assignment mode is used with the L3 forwarding mode. |
| Centralized—When a centralized DHCP scope is configured, The Virtual Controller does not assign an IP address to the client and the DHCP traffic is directly forwarded to the controller over the IPSec tunnel. |
Example
The following example configures a distributed,l2 DHCP scope:
(Instant Access Point)(config)# ip dhcp corpNetwork1
(Instant Access Point)(DHCP Profile"corpNetwork1")# ip dhcp server-type distributed,l2
(Instant Access Point)(DHCP Profile"corpNetwork1")# server-vlan 1
(Instant Access Point)(DHCP Profile"corpNetwork1")# subnet 192.0.1.0
(Instant Access Point)(DHCP Profile"corpNetwork1")# subnet-mask 255.255.255.0
(Instant Access Point)(DHCP Profile"corpNetwork1")# default-router 192.0.1.1
(Instant Access Point)(DHCP Profile"corpNetwork1")# client-count 0
(Instant Access Point)(DHCP Profile"corpNetwork1")# dns-server 192.0.1.2
(Instant Access Point)(DHCP Profile"corpNetwork1")# domain-name www.example.com
(Instant Access Point)(DHCP Profile"corpNetwork1")# lease-time 1200
(Instant Access Point)(DHCP Profile"corpNetwork1")# ip-range 192.0.1.0 192.0.1.17
(Instant Access Point)(DHCP Profile"corpNetwork1")# reserve first 2
(Instant Access Point)(DHCP Profile"corpNetwork1")# option 176 "MCIPADD=10.72.80.34,MCPORT=1719,TFTPSRVR=10.80.0.5,L2Q=1,L2QVLAN=2,L2QAUD=5,L2QSIG=3"
(Instant Access Point)(DHCP Profile"corpNetwork1")# end
(Instant Access Point))# commit apply
Command History
Version | Description |
Aruba Instant 6.3.1.1-4.0 | This command is modified. |
Aruba Instant 6.2.1.0-3.3 | This command is introduced. |
Command Information
IAP Platform | Command Mode |
All platforms | Configuration mode and IP DHCP profile configuration sub-mode. |