This is very important. You either place your DHCPs in your multiple broadcast domains, or do your L4 routing with dhcp-helpers (which of course is the right way to do it). Even then you have to be careful how you are doing your routing. There is no other way.

Be also careful with your NATs, many protocols are broken by NAT.

Regards,

Rui Ribeiro

http://pt.linkedin.com/pub/rui-ribeiro/16/ab8/434/

Message: 3
Date: Thu, 03 Apr 2014 12:26:51 -0400
From: Alan DeKok <aland@deployingradius.com>
To: FreeRadius users mailing list
<freeradius-users@lists.freeradius.org>
Subject: Re: Freeradius DHCP IP pool and not correct port for DHCP
Message-ID: <533D8BCB.3000403@deployingradius.com>
Content-Type: text/plain; charset=ISO-8859-1

Thomas Bru wrote:
> You're true and your explanations are very usefull.

That's good.

> The IAD has no problem because it did what I programmed.
> But there are not solution to this source-nat problem.

There is. DHCP traffic MUST NOT be NATed. The NAT gateway must
either (a) block the DHCP traffic, or (b) implement a DHCP relay.

Alan DeKok.