Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

One of our contractors just tried telling my boss that we should be using our Cisco ASA to serve DHCP instead of our DC... Is there any merit to this? Or is he just, once again, blowing smoke.

share|improve this question

closed as too localized by EEAA, Ward, mdpc, devicenull, Bryan Dec 19 '12 at 12:09

This question is unlikely to help any future visitors; it is only relevant to a small geographic area, a specific moment in time, or an extraordinarily narrow situation that is not generally applicable to the worldwide audience of the internet. For help making this question more broadly applicable, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

3  
If you're running AD, not a chance. But you should consider moving DHCP off your DC and onto another server. –  jscott Dec 19 '12 at 2:39
2  
In a Windows environment I don't see any benefit to using a DHCP server other than a Windows DHCP server. Did he give you supporting arguments or compelling evidence? A sure sign of a blowhard is that they're emphatic about their argument but they can't show evidence to support it. –  joeqwerty Dec 19 '12 at 2:41
    
I am considering moving DHCP, but there are no problems with it at the moment so its not a big hurry. –  Matt Bear Dec 19 '12 at 2:45
1  
These days I run DHCP on both domain controllers, assigning the full scope to each with collision detection and 2000ms delay on the secondary. –  SpacemanSpiff Dec 19 '12 at 4:39

3 Answers 3

up vote 3 down vote accepted

DHCP is fine on the Windows server, on a DC or not on a DC.

I can think of no benefit to be had from moving it off Windows.

OK, more detail is requested.... here we go:

a) Administer everything in one place on windows (instead of needing multiple tools)

-- Especially useful if you have reservations and other dhcp config needs (you may not have em now,,, but in the future you might well!)

b) Avoid having multiple dhcp servers (this leads to chaos). Many of us find over time that we are plugging in various routers and things (often just to use em as hubs), and we find stations getting addresses we did not intend. This is a result of "dhcp server proliferation"

c) Windows dhcp works well

d) If you use dhcp on the router, you do want to turn it off on windows (for the reason above). Some network admin in future might well turn it back on (on the win server) and then the fun starts!

Other odds and ends:

1) If you need to delegate dhcp admin to multiple people, this can sometimes be a problem in Windows DHCP (unless you are OK with all of them being network admins)

--- I have never seen a situation that needed multiple dhcp admins... the whole goal of dhcp is config and forget...

2) dhcp doesn't replicate with AD (afaik). So if you want redundant dhcp servers, I believe the only solve is to split the scope across multiple DCs

share|improve this answer
    
Surely you could edit your answer to detail the benefits, in a Windows environment, of having DHCP on a domain member server. :) –  jscott Dec 19 '12 at 3:21

I've done it both ways, running DHCP on my Windows Server and also letting the Cisco ASA handle DHCP. I have no advantage/benefit/disadvantage in either scenario. I usually like to keep DNS and DHCP together and if you are running AD then i'd probably leave those roles on the servers.

share|improve this answer

Last I looked, my Cisco ASA couldn't do stuff I use -- fixed IP for MAC and automatic DNS registration on DHCP registration, so that wasn't going to happen.

Maybe the reverse is also true, but I haven't seen the need yet.

share|improve this answer
    
True, Cisco ASA won't allow you to do IP Reservations which is another reason I ditch them in some cases. –  user72593 Dec 19 '12 at 5:33

Not the answer you're looking for? Browse other questions tagged or ask your own question.