
1-20
Cisco PIX Firewall and VPN Configuration Guide
78-15033-01
Chapter 1 Getting Started
Accessing and Monitoring PIX Firewall
A DHCP server is simply a computer that provides configuration parameters to a DHCP client, and a
DHCP client is a computer or network device that uses DHCP to obtain network configuration
parameters.
When functioning as a DHCP server, the PIX Firewall dynamically assigns IP addresses to DHCP clients
from a pool of designated IP addresses.
PIX Firewall Version 6.2 or higher supports DHCP option 66 and DHCP option 150 requests. This lets
DHCP clients, such as Cisco IP Phones, obtain the address of a designated TFTP server. Cisco IP Phones
typically obtain the configuration information required to connect to a Cisco CallManager server from
a TFTP server. A DHCP option 66 request causes the DHCP server to provide the address of a single
TFTP server; an option 150 request obtains a list of TFTP servers.
PIX Firewall Version 6.3 or higher allows the use of the DHCP server on any interface. Previous versions
only allowed the use of the DHCP server on the inside interface.
DHCP Relay
PIX Firewall Version 6.3 provides support for DHCP relay. The DHCP relay agent provided helps
dynamically assign IP addresses to hosts on the inside interfaces of the PIX
Firewall. When the DHCP
relay agent receives a request from a host on an inside interface, it forwards the request to one of the
specified DHCP servers on an outside interface.
DHCP Client
DHCP client support within the PIX Firewall is designed for use within a small office, home office
(SOHO) environment using a PIX
Firewall that is directly connected to a DSL or cable modem that
supports the DHCP server function.
Note The PIX Firewall DHCP client can only be enabled on the outside interface.
With the DHCP client feature enabled on a PIX Firewall, the PIX Firewall functions as a DHCP client
to a DHCP server allowing the server to configure the outside interface with an IP address, subnet mask,
and optionally a default route.
Note Use of the DHCP client feature to acquire an IP address from a generic DHCP server is not supported.
Also, the PIX Firewall DHCP client does not support failover configurations.
Accessing and Monitoring PIX Firewall
This section describes how you access and monitor the PIX Firewall system. It contains the following
topics:
• Connecting to the Inside Interface of a Remote PIX Firewall, page 1-21
• Cisco PIX Device Manager (PDM), page 1-21
• Command Authorization, page 1-21
Kommentare zu diesen Handbüchern