Fwd: VLAN configuration not working

[Christian Kratzer]

Hi,

On Sun, 14 Dec 2014, Jens Jönsson wrote:
> When I check iptables I get the following result:

as I just wrote. Do not use a shared network.

Greetings
Christian

>
> root at server:~# iptables -L
> Chain INPUT (policy ACCEPT)
> target     prot opt source               destination
>
> Chain FORWARD (policy ACCEPT)
> target     prot opt source               destination
>
> Chain OUTPUT (policy ACCEPT)
> target     prot opt source               destination
> root at server:~#
>
>
>
>
> ---------- Forwarded message ----------
> From: Jens Jönsson <jens.joensson at gmail.com>
> Date: 2014-12-14 13:57 GMT+01:00
> Subject: VLAN configuration not working
> To: dhcp-users at lists.isc.org
>
> Hi!
>
> I have installed an configured ISC DHCP server.
>
> I want to provide IP-addresses on 2 VLANs.
>
> I have the following network configuration:
>
> eth0      Link encap:Ethernet  HWaddr 00:00:00:00:4a:1e
>          inet addr:192.168.15.119  Bcast:192.168.15.255  Mask:255.255.255.0
>          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>          RX packets:438 errors:0 dropped:0 overruns:0 frame:0
>          TX packets:64 errors:0 dropped:0 overruns:0 carrier:0
>          collisions:0 txqueuelen:1000
>          RX bytes:45874 (44.7 KiB)  TX bytes:8606 (8.4 KiB)
>
> eth1      Link encap:Ethernet  HWaddr 00:00:00:0:4a:28
>          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>          RX packets:594 errors:0 dropped:6 overruns:0 frame:0
>          TX packets:36 errors:0 dropped:0 overruns:0 carrier:0
>          collisions:0 txqueuelen:1000
>          RX bytes:61761 (60.3 KiB)  TX bytes:2993 (2.9 KiB)
>
> eth1.20   Link encap:Ethernet  HWaddr 00:00:00:00:4a:28
>          inet addr:172.16.254.2  Bcast:172.16.254.255  Mask:255.255.255.0
>          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>          RX packets:207 errors:0 dropped:0 overruns:0 frame:0
>          TX packets:9 errors:0 dropped:0 overruns:0 carrier:0
>          collisions:0 txqueuelen:0
>          RX bytes:19682 (19.2 KiB)  TX bytes:1291 (1.2 KiB)
>
> eth1.200  Link encap:Ethernet  HWaddr 00:00:00:00:4a:28
>          inet addr:172.16.100.2  Bcast:172.16.100.255  Mask:255.255.255.0
>          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
>          TX packets:16 errors:0 dropped:0 overruns:0 carrier:0
>          collisions:0 txqueuelen:0
>          RX bytes:0 (0.0 B)  TX bytes:956 (956.0 B)
>
> lo        Link encap:Local Loopback
>          inet addr:127.0.0.1  Mask:255.0.0.0
>          UP LOOPBACK RUNNING  MTU:16436  Metric:1
>          RX packets:3 errors:0 dropped:0 overruns:0 frame:0
>          TX packets:3 errors:0 dropped:0 overruns:0 carrier:0
>          collisions:0 txqueuelen:0
>          RX bytes:788 (788.0 B)  TX bytes:788 (788.0 B)
>
> I have installed and configured ISC DHCP server:
> '
> /etc/default/isc-dhcp-server
> INTERFACES="eth1.20 eth1.200"
>
> I have checked that it's running on both VLANs:
>
> root at dhcp-server:~# ps ax | grep dhcpd
> 2605 ?        Ss     0:00 /usr/sbin/dhcpd -q -cf /etc/dhcp/dhcpd.conf -pf
> /var/run/dhcpd.pid eth1.20 eth1.200
> 2763 pts/0    S+     0:00 grep dhcpd
>
> If I connect a PC to VLAN200 I get an IP-address from the 172.16.100.0/24
> range. If I move same PC to VLAN20 I get an error:
>
> Unable to contact your DHCP server. Request has timed out.
>
> If I manually configure PC with an IP-address on subnet 172.16.254.0/24
> network and ping DHCP server I get a reply without problems. So PC is on
> VLAN20.
> Same of course apply for VLAN200, which make me conclude it's not a VLAN
> network problem.
>
> Here's my dhcpd.conf file:
>
> shared-network officenet {
>  subnet 172.16.254.0 netmask 255.255.255.0 {
>    pool {
>          option routers 172.16.254.1;
>          option subnet-mask 255.255.255.0;
>          option nis-domain "office.tld";
>          option domain-name "vlan20.office.tld";
>          option domain-name-servers 8.8.8.8, 8.8.4.4;
>          option ntp-servers 0.pool.ntp.org, 1.pool.ntp.org;
>          range 172.16.254.10 172.16.254.250;
>    }
>  }
>  subnet 172.16.100.0 netmask 255.255.255.0 {
>    pool {
>          option routers 172.16.100.1;
>          option subnet-mask 255.255.255.0;
>          option nis-domain "office.tld";
>          option domain-name "vlan200.office.tld";
>          option domain-name-servers 8.8.8.8, 8.8.4.4;
>          range 172.16.100.10 172.16.100.250;
>    }
>  }
> }
>
> Any help would be appreciated :-)
>
> Thanks in advance...
>

-- 
Christian Kratzer                   CK Software GmbH
Email:   ck at cksoft.de               Wildberger Weg 24/2
Phone:   +49 7032 893 997 - 0       D-71126 Gaeufelden
Fax:     +49 7032 893 997 - 9       HRB 245288, Amtsgericht Stuttgart
Mobile:  +49 171 1947 843           Geschaeftsfuehrer: Christian Kratzer
Web:     http://www.cksoft.de/