Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

One of our contractors just tried telling my boss that we should be using our Cisco ASA to serve DHCP instead of our DC... Is there any merit to this? Or is he just, once again, blowing smoke.

share|improve this question
If you're running AD, not a chance. But you should consider moving DHCP off your DC and onto another server. – jscott Dec 19 '12 at 2:39
In a Windows environment I don't see any benefit to using a DHCP server other than a Windows DHCP server. Did he give you supporting arguments or compelling evidence? A sure sign of a blowhard is that they're emphatic about their argument but they can't show evidence to support it. – joeqwerty Dec 19 '12 at 2:41
I am considering moving DHCP, but there are no problems with it at the moment so its not a big hurry. – Matt Bear Dec 19 '12 at 2:45
These days I run DHCP on both domain controllers, assigning the full scope to each with collision detection and 2000ms delay on the secondary. – SpacemanSpiff Dec 19 '12 at 4:39
up vote 4 down vote accepted

DHCP is fine on the Windows server, on a DC or not on a DC.

I can think of no benefit to be had from moving it off Windows.

OK, more detail is requested.... here we go:

a) Administer everything in one place on windows (instead of needing multiple tools)

-- Especially useful if you have reservations and other dhcp config needs (you may not have em now,,, but in the future you might well!)

b) Avoid having multiple dhcp servers (this leads to chaos). Many of us find over time that we are plugging in various routers and things (often just to use em as hubs), and we find stations getting addresses we did not intend. This is a result of "dhcp server proliferation"

c) Windows dhcp works well

d) If you use dhcp on the router, you do want to turn it off on windows (for the reason above). Some network admin in future might well turn it back on (on the win server) and then the fun starts!

Other odds and ends:

1) If you need to delegate dhcp admin to multiple people, this can sometimes be a problem in Windows DHCP (unless you are OK with all of them being network admins)

--- I have never seen a situation that needed multiple dhcp admins... the whole goal of dhcp is config and forget...

2) dhcp doesn't replicate with AD (afaik). So if you want redundant dhcp servers, I believe the only solve is to split the scope across multiple DCs

share|improve this answer

I've done it both ways, running DHCP on my Windows Server and also letting the Cisco ASA handle DHCP. I have no advantage/benefit/disadvantage in either scenario. I usually like to keep DNS and DHCP together and if you are running AD then i'd probably leave those roles on the servers.

share|improve this answer

Last I looked, my Cisco ASA couldn't do stuff I use -- fixed IP for MAC and automatic DNS registration on DHCP registration, so that wasn't going to happen.

Maybe the reverse is also true, but I haven't seen the need yet.

share|improve this answer
True, Cisco ASA won't allow you to do IP Reservations which is another reason I ditch them in some cases. – user72593 Dec 19 '12 at 5:33

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.