Multiple chrooted dhcp servers for vlans on Linux?

Cuttler, Brian (HEALTH) brian.cuttler at
Fri Feb 26 19:00:55 UTC 2016

Don't you want to use virtual network interfaces, bind each dhcp to one of those and use different helper addresses for each vlan/network range?

From: dhcp-users-bounces at [mailto:dhcp-users-bounces at] On Behalf Of stevel_isc at
Sent: Friday, February 26, 2016 1:52 PM
To: dhcp-users at
Subject: Multiple chrooted dhcp servers for vlans on Linux?

The goal is to have multiple chrooted dhcpd processes, one for each of four vlans, such that a compromise of a more public one won't affect a more private one.

Server version is isc-dhcpd-4.3.3-P1 and Linux is a recent install of Debian.

I've got them all running but looking at dhcpd processes in netstat I don't think it'll actually work in practice.

Even though each one is specified to a particular vlan interface they all appear to be listening to and I see nothing visible differentiating them.

Are they really all listing on every vlan, and does that mean incoming requests over one vlan will be handled by whatever server happens to grab the request (3 out of 4 chance it's the wrong one)?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the dhcp-users mailing list