PCS - DHCP Relay

[KAS]

Has anyone actually used the PCS to sucessfully utilize a Windows 2019 server as a DHCP Server (That doesn't reside on the same LAN segment as the clients [Relay])?

Opening a case with Microsoft, Microsoft claims that "It is supported" in Server 2019 but is unable to provide ANY documentation proving that it is supported.

[RD]

Hi,

Yes this is possible. There are 3 things here to configure.

1. Configure a Scope on the DHCP service on a windows server. The scope should be in the same network as the PSA internal port IP.

2. In the PSA device under Users->Resource Policies->VPN Tunneling Connection Profiles you will find a default profile. In the DHCP Servers box enter the IP of the DHCP server where you configured the scope.

3. Most important is that you router/firewall should support and be configured for DHCP relay. That means when the request comes from the PSA Internal port the router should relay the DHCP request to the DHCP server. Check this in your router/firewall OEM support documentation.

[KAS]

Great, that does not answer the question at all.

"Has anyone actually used the PCS to sucessfully utilize a Windows 2019 server as a DHCP Server (That doesn't reside on the same LAN segment as the clients [Relay])?"

Doesn't.  Does NOT reside on the same LAN segment as the clients.

[rdumitrescu]

Well, you told that you opened a case with MS. Have you asked them if they support DHCP Option 118?

If DHCP Option 118 is not supported by the DHCP server you are not able to accomplish what you want.

Have you checked this KB?

https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB22611/

"Configure DHCP Option 118 if it is supported by your DHCP server, however, keep in mind that this option will not work with a Microsoft DHCP server, as Microsoft does not currently implement this RFC."