Just another Microsoft MVPs site

SBS SP1 + ISA 2004 = No DHCP?

Last week, we were installing SBS SP1 for one of our SBS Premium customers.  Naturally, we upgraded their ISA 2000 to ISA 2004, which went very smoothly.  The only problem was that after the upgrade to ISA 2004 was complete, none of their workstations could pull an IP via DHCP.  We verified that the DHCP Server service was running, and tried restarting the DHCP Server service, as well as rebooting the server – both to no avail.


Well, it turns out that this is at least partially my fault.  You see, when I set up ISA 2000, I never let ISA build the LAT table for me – I always manually specified the internal address range I wanted.  So for an SBS using the default IP of 192.168.16.2, I would specify a LAT of 192.168.16.1 to 192.168.16.254.


ISA 2004 varies from ISA 2000 in that it firewalls all network interfaces, including the internal interface.  My DHCP problem was that DHCP requests happen via the broadcast address of .255 – since my LAT entry ended at .254 – ISA blocked the traffic, so the DHCP Server never received the client request, and the client thus was unable to pull an IP via DHCP.


SO – if you encounter this problem, open your ISA Management console, and expand <servername> | Configuration | Network.  Select the Internal network, and edit it to include .255 

6 Comments

  1. Jason

    Ahh!!! So glad someone has seen this, it was throwing me for a loop…..

    Just glad not to be the only one.

    ~Jason

  2. dj

    I’m running SBS 2003 SP1, but I can find my ISA management console. where should i look?

  3. Dale

    It is amazing the little things that make it both easy and difficult. Thanks for the tidbit it was very helpful.

  4. Rudi

    I would like to congratulate you for the resolution of this issue. Well spotted, solved my problems

    Once again

    Well done

    Rudi

  5. Eddie

    Oh thank God! We did the SP upgrade last night, and this morning, noone could connect. After checking EVERYTHING, we were at a loss at to why ISA was still denying our policies. Our little Million Dollar Small Business firm was down all morning until I came across your post!

    BRAVO!!!!!

  6. Chad (Different Chad)

    Ran into the same thing. Your fix worked great. Thanks!

    Chad

Leave a Reply

Your email address will not be published. Required fields are marked *