DHCP config

Glenn Satchell Glenn.Satchell at uniq.com.au
Mon Jun 25 15:32:02 UTC 2007


Yes, that should do it nicely. Except that in subnet 69.x.x.112 the
router IP address overlaps with the range. If there's only one IP in
the range you can specify it as:

	range 69.x.x.114;

regards,
-glenn

>From: "Gideon Viator" <ktcisg at kaplantel.net>
>
>Thanks,
>
>How about this? 
>
>
>class "amino" {
>  match if substring( hardware, 0, 3 ) = 00:02:02; 
>}
>
>
>subnet 69.x.x.112 netmask 255.255.255.252
>{
>	option routers 69.x.x.113;
>	option broadcast-address 69.x.x.115;
>	range 69.x.x.113 69.x.x.114;
>	option subnet-mask 255.255.255.252;
>}
>
>subnet 69.x.x.0 netmask 255.255.254.0
>{ 
>	option subnet-mask 255.255.254.0;
>	option broadcast-address 69.x.x.255;
>	option routers 69.x.x.1;
>	option domain-name-servers 69.x.x.9, 69.x.x.196;
>	option domain-name "kaplantel.net";
>	pool {	range 69.x.x.113 69.x.x.114;
>		deny members of "amino";
>}
>
>}
>ddns-update-style ad-hoc;
>
>
>
>Gideon Viator
>IT Administrator 
>Kaplan Telecommunications
>337-643-7171
> 
>
>
>-----Original Message-----
>From: dhcp-users-bounce at isc.org [mailto:dhcp-users-bounce at isc.org] On Behalf
>Of Glenn Satchell
>Sent: Monday, June 25, 2007 8:58 AM
>To: dhcp-users at isc.org
>Subject: Re: DHCP config
>
>You only need the 'deny booting' in the global scope, unless you meant
>'allow booting' for that subnet. Although I am not sure that will work,
>as once the packet matches the deny booting, no further processing
>takes place.
>
>To do an allow further down the config file then you probably want a
>class:
>
>class "amino" {
>  match if substring( hardware, 0, 3 ) = 00:02:02;
>}
>
>Then in the appropriate pools
>  deny members of "amino";
>or
>  allow members of "amino";
>
>eg:
>subnet 69.X.X.X netmask 255.255.255.252
>{
>	option routers 69.x.x.x;
>	option broadcast-address 69.x.x.115;
>	option subnet-mask 255.255.255.252;
>	pool {
>		range 69.x.x.113 69.x.x.114;
>		deny members of "amino";
>	}
>}
>
>If there are more than a few prefixes then you could use subclasses,
>see the dhcpd.conf man page. There's a good example there.
>
>And finally, you can test the syntax of your proposed dhcpd.conf using
>the -t and -cf options to dhcpd. That's covered in the dhcpd man page.
>
>  dhcpd -t -cf /path/to/dhcpd.conf.new
>  
>regards,
>-glenn
>
>>From: "Gideon Viator" <ktcisg at kaplantel.net>
>>To: <dhcp-users at isc.org>
>>Subject: Re: DHCP config
>>Date: Sun, 24 Jun 2007 16:58:48 -0500
>>
>>Ok guys. So i change my config to:
>>
>>if substring( hardware, 0, 3 ) = 00:02:02 {
>>  ignore booting;
>>}
>>subnet 69.X.X.X netmask 255.255.255.252
>>{
>>
>>        option routers 69.x.x.x;
>>        option broadcast-address 69.x.x.115;
>>        range 69.x.x.113 69.x.x.114;
>>        option subnet-mask 255.255.255.252;
>>}
>>
>>subnet 69.X.X.X netmask 255.255.254.0
>>{
>>        if substring( hardware, 0, 3 ) = 00:02:02 {
>>  ignore booting;
>>}
>>{
>>        range 69.x.x.20 69.x.x.254;
>>        option subnet-mask 255.255.254.0;
>>        option broadcast-address 69.x.x.255;
>>        option routers 69.x.x.1;
>>        option domain-name-servers 69.x.x.9, 69.x.x.196;
>>        option domain-name "kaplantel.net";
>>}
>>ddns-update-style ad-hoc;
>>
>>Looks correct?
>>
>>----- Original Message ----- 
>>From: "Simon Hobson" <dhcp1 at thehobsons.co.uk>
>>To: <dhcp-users at isc.org>
>>Sent: Sunday, June 24, 2007 4:27 PM
>>Subject: Re: DHCP config
>>
>>
>>> Gideon Viator wrote:
>>>
>>>>Glenn,
>>>>
>>>>I see what you are saying. It's kinda what I want to do. But, i dont want
>
>>>>to
>>>>deny booting, just deny requests all together to those devices so that it
>>>>will time out and the STB will obtain an IP address from the correct 
>>>>server.
>>>
>>> That's what deny booting does - tell the server not to send any 
>>> offers/acks.
>>>
>>> You may prefer ignore booting which does just the same but doesn't
>>> log a message each time. Other than the logging they are functionally
>>> identical.
>
>
>


More information about the dhcp-users mailing list