Trouble matching hardware address with class, subclass and pools

[Fleming, Tony]

Hello folks,
I am really struggling with class, subclass and matching directives.
I am trying to match a list of hardware addresses to allow them into a one set of addresses and everyone else goes to another set of addresses.

My configuration looks like:
Class "Allowed" {
                match pick-first-value (option dhcp-client-identifier, hardware);
}

Subclass "Allowed" 1:xx:xx:xx:xx:xx:01;

shared-network "Restricted_Net" {
                authoritative;
                subnet 10.56.128.0 netmask 255.255.224.0 {
                        pool {
                                allow dynamic bootp clients;
                                allow members of "Allowed";
                                option routers 10.56.128.1;
                                range 10.56.128.21 10.56.159.250;
                        }
                        pool {
                                option routers 10.56.128.1;
                                range 10.56.159.251 10.56.159.254;
                        }
                }
}

When using the device with the Ethernet xx:xx:xx:xx:xx:01, pool 10.56.128.21-250 (members of "Allowed") is never used. It always falls through to the second pool "10.56.159.251-254".

I know I am doing something dumb, but I am completely missing it.

I am running ISC DHCP Server 4.3.6

Any guidance is much appreciated.

Tony
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/dhcp-users/attachments/20201216/fb0d1cc1/attachment.htm>