- Community Home
- >
- Networking
- >
- Legacy
- >
- Switches, Hubs, Modems
- >
- Re: IP Helper address overrides firewall ?
-
- Forums
-
- Advancing Life & Work
- Advantage EX
- Alliances
- Around the Storage Block
- HPE Ezmeral: Uncut
- OEM Solutions
- Servers & Systems: The Right Compute
- Tech Insights
- The Cloud Experience Everywhere
- HPE Blog, Austria, Germany & Switzerland
- Blog HPE, France
- HPE Blog, Italy
- HPE Blog, Japan
- HPE Blog, Middle East
- HPE Blog, Russia
- HPE Blog, Saudi Arabia
- HPE Blog, South Africa
- HPE Blog, UK & Ireland
-
Blogs
- Advancing Life & Work
- Advantage EX
- Alliances
- Around the Storage Block
- HPE Blog, Latin America
- HPE Blog, Middle East
- HPE Blog, Saudi Arabia
- HPE Blog, South Africa
- HPE Blog, UK & Ireland
- HPE Ezmeral: Uncut
- OEM Solutions
- Servers & Systems: The Right Compute
- Tech Insights
- The Cloud Experience Everywhere
-
Information
- Community
- Welcome
- Getting Started
- FAQ
- Ranking Overview
- Rules of Participation
- Tips and Tricks
- Resources
- Announcements
- Email us
- Feedback
- Information Libraries
- Integrated Systems
- Networking
- Servers
- Storage
- Other HPE Sites
- Support Center
- Aruba Airheads Community
- Enterprise.nxt
- HPE Dev Community
- Cloud28+ Community
- Marketplace
-
Forums
-
Blogs
-
Information
-
English
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
10-07-2009 06:18 AM
10-07-2009 06:18 AM
Solution>>>
I don't understand what you mean with:
The switches don't have ip routing enabled
=> so an ip-helper adress configured here has no function!
An ip-helper must be configured at the router! <<<
- in your original post you mention having configured an ip-helper.
- >>> The switches doesn't have "ip routing" enabled. This should be the task of the firewall <<<
- In the diagram you supplied, the text "ip-helper" stands next to one of the switches.
So I assumed you configured this at the switch.
please report if this assumption is wrong.
If the IP-helper is configured at the switch and routing is not enabled, it will do nothing.
The ip-helper function will be performed by the firewall as this also does the routing.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
10-07-2009 06:23 AM
10-07-2009 06:23 AM
Re: IP Helper address overrides firewall ?
This should work as you intended.
if the switches don't route then they should only forward packets on layer-2 within the vlan.
And the firewall is the only device that should connect the vlan's.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
10-08-2009 01:30 AM
10-08-2009 01:30 AM
Re: IP Helper address overrides firewall ?
i configured it on the vlan because i thought that the dhcp packets need to know where the dhcp servers are.
But you are right. I just deleted the ip helper entry in the vlan. And i also get an ip address in the right subnet.
And now :) the the firewall kicks in and blocks the requests to my dhcp servers.
Thanks a lot for the solution. Although it's still a security issue. For someone who don't know to configure it right ;)
Greets
Stephan
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
10-08-2009 01:50 AM
10-08-2009 01:50 AM
Re: IP Helper address overrides firewall ?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
10-08-2009 01:58 AM
10-08-2009 01:58 AM
Re: IP Helper address overrides firewall ?
Good you got it sorted :D
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
10-08-2009 02:05 AM
10-08-2009 02:05 AM
Re: IP Helper address overrides firewall ?
And another thing i discovered now. I need to setup at least one switch with an ip address and ip helper.
- « Previous
-
- 1
- 2
- Next »
Hewlett Packard Enterprise International
- Communities
- HPE Blogs and Forum
© Copyright 2021 Hewlett Packard Enterprise Development LP