Symptom
- DHCP clients behind VPN or DMVPN router not able to get IP address via DHCP.
Conditions
- First reported on C3650/C3850 switches
- Affected switch performing routing between relay agent and DHCP server
- DHCP snooping enabled
Workaround
- Disable DHCP snooping
Further Problem Description
- Issue does not occur when affected switch is acting as DHCP relay agent.
- Affected switch is setting incorrect destination MAC address after snooping. This can be observed in DHCP snooping debugs or with packet capture.