sa3450 and sa3000 Series VPN Manager - Release 6.8.2 Release Notes

Release 6.8.2 Release Notes

DHCP Functionality Added to Devices

DHCP functionality has been added in Release 6.8.2. Now a

device’s physical Ethernet interfaces can be configured to

obtain an IP address using DHCP (Dynamic Host

Configuration Protocol).

The DHCP functionality was implemented in the software

by adding a dhcp option to the existing ip address

command. To enable DHCP functionality for a device, type

dhcp after the ip address command in the device’s

configuration file, from the Console or Telnet window, or

select the DHCP option in the VPN Manager GUI.

By virtue of its presence in the configuration file, the dhcp

option following the ip address command tells the device

interface to broadcast to a DHCP server to obtain a Client-

IP address.

Also in Release 6.8.2, you may add a unique alphanumeric

client identifier up to 61 characters in length after the ip

address command and dhcp option. The client ID can be

used as a machine name equivalent, for example, if you are

using a cable modem connection to the Internet that

requires a machine name, enter it here.

To finish configuring DHCP functionality, in addition to

specifying dhcp after the ip address command, specify that

both Ethernet interfaces should be DHCP capable, and that

the device should be the default gateway.

Configuring DHCP Relay for Site-to-Site VPN

Tunnels

In Release 6.8.2, you can assign internal (remote) network

addresses centrally using DHCP relay over a tunnel. The

DHCP relay capability is provided for both IPSec and SST

site-to-site (fixed) VPN tunnels.

The relay functionality allows the remote device to

recognize a DHCP request broadcast packet, to amend the

packet so it has a specific destination past the central

device (down to the granularity of the scope level of the

DHCP server, if desired), and to forward the modified

packet to its new destination.