I'm in the process of setting up a new SSG20 for our network, and have spent quite a few hours trying to figure out why the DHCP-relay failed for the DMZ zone, but worked for a Guest zone that was also set up on the firewall. After much pouring over debug logs and trawling through the forums, it appears that DHCP-relay does not work from the standard DMZ setup.
I've already demonstrated that setting up an alternative DMZ zone works fine for DHCP-relay, but that made me wonder whether there was a valid reason for the restriction on the "out-of-the-box" DMZ.
Is there some obscure reason why DHCP-relay doesn't work in this situation? Is there any philosophical reason for not creating a custom DMZ that would allow DHCP-relay to work.
Many thanks,
Innes (NZ)
