<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="City"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="place"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="PlaceType"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="PlaceName"/>
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:Arial;
color:windowtext;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Hello All:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>We’re trying to migrate from our old DHCP server
(running version 3.0.1-10 EL3) to our new DHCP server (running version 3.0.1-59
EL4). Both servers are running IPTables as the host firewall with the following
rules in place:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 67 -m state
--state NEW -j ACCEPT<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>-A RH-Firewall-1-INPUT -p udp -m udp --dport 67 -m state
--state NEW -j ACCEPT<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 68 -m state
--state NEW -j ACCEPT<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>-A RH-Firewall-1-INPUT -p udp -m udp --dport 68 -m state
--state NEW -j ACCEPT<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>We copied the dhcpd.conf, dhcpd.master file (the file gets
included by dhcpd.conf, it has all our statics defined), and the dhcpd.leases
files over to the new server, shut down the old server and start up the new one
(we already have the new one set up on our router interfaces for dhcp relay (ip
helper address)).<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Tailing the logs after the switch and testing a couple of
our vlans, everything looked successful. This was last Friday.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Come Monday morning we had a handful of reports of folks on
certain vlans weren’t able to get leases. I was able to replicate this
on my second desktop in my office; it would make the DHCP request and get no
reply from the server. On the server I would see the request come in from
my second desktop, an IP would be offered. Somewhere the offer is getting
munched.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>This may not even be a server problem (as I do see the offer
in the server logs). From what I can tell so far there is no difference
between a vlan that is working and one that is not looking at the cisco router
and switch configs (6500 cores, HSRP on the vlans, same core switch is the
active router on all the vlans).<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>So, have any of you run into similar issues?<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>*********************************************************</span></font><o:p></o:p></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>John K. Bracey, Sr. Network Analyst <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>NTA Change Management Group Chair<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Communications Services / Network Operations<o:p></o:p></span></font></p>
<p class=MsoNormal><u1:PlaceName u2:st="on"><st1:PlaceName w:st="on"><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>California</u1:PlaceName></span></font></st1:PlaceName><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'> <u1:PlaceType u2:st="on"><st1:PlaceType
w:st="on">State</u1:PlaceType></st1:PlaceType> <u1:PlaceType u2:st="on"><st1:PlaceType
w:st="on">University</u1:PlaceType></st1:PlaceType>, <u1:place u2:st="on"><u1:City u2:st="on"><st1:City
w:st="on"><st1:place w:st="on">Chico</u1:City></u1:place></st1:place></st1:City></span></font><o:p></o:p></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>530-898-5400</span></font><o:p></o:p></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>*********************************************************</span></font><o:p></o:p></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
</div>
</body>
</html>