DHCP Relay Agent and NAT

Hello,

I have setup like this:


_Server A: Win2003_______
|
|
|NAT Private if/NAT Public if |
DHCP clients<--->| DHCP relay agent <----->DHCP host (Server
B: Win2003)
|______________________ |

NAT is enabled (but Basic Firewall disabled) on Server A. Server A also acts
as DHCP relay agent (configured on its private interface). Server B (which
is DHCP host) resides on subnet to which Server A public interface is
connected.
Problem: DHCP relay agent (on Server A) and DHCP host (on Server B) cannot
talk to each other (only when NAT is enabled on Server A).
What can I do? Setup IP packet filtering on Server A public interface: to
allow UDP ports 67,68 traffic go unchanged through NAT? But how to do it?

Thanks,
Boris

In news:94D45529-2E7C-4CB1-B783-(E-Mail Removed),
Boris <(E-Mail Removed)> typed:
> Hello,
>
> I have setup like this:
>
>
> _Server A: Win2003_______
> |
> >
> |NAT Private if/NAT Public if |
> DHCP clients<--->| DHCP relay agent <----->DHCP host
> (Server B: Win2003)
> |______________________ |
>
> NAT is enabled (but Basic Firewall disabled) on Server A. Server A
> also acts as DHCP relay agent (configured on its private interface).
> Server B (which is DHCP host) resides on subnet to which Server A
> public interface is connected.
> Problem: DHCP relay agent (on Server A) and DHCP host (on Server B)
> cannot talk to each other (only when NAT is enabled on Server A).
> What can I do? Setup IP packet filtering on Server A public
> interface: to allow UDP ports 67,68 traffic go unchanged through NAT?
> But how to do it?
> Thanks,
> Boris

Have you tried configuring it as a router? Enable routing in RRAS properties
and remove NAT. But I'm sure if you do this, you will also possibly need to
make a static route entry on your edge firewall in order to access that
subnet, unless the sole purpose is for DHCP relay.

--
Regards,
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT,
MVP Microsoft MVP - Directory Services
Microsoft Certified Trainer

For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Infinite Diversities in Infinite Combinations