<div dir="ltr"><div style><div style>Ubuntu 12.04 with Installed Packages:</div><div>isc-dhcp-server 4.1.ESV-R4-0ubuntu5.6 ISC DHCP server for automatic IP address assignment</div><div>isc-dhcp-server-ldap 4.1.ESV-R4-0ubuntu5.6 DHCP server able to use LDAP as backend</div>
</div><div style><br></div><div style>We are attempting to implement a failover DHCP server configuration, using LDAP for the back end. We have multiple pools assigned by clientClass configuration, using host definitions and subclasses. So far, everything with my LDAP configuration is working properly when loading the configuration in Static mode, and the test client gets the proper address for the class it is assigned to. </div>
<div style><br></div><div style>However, when I switch to dynamic mode (more practical for our larger network), the subclass entries appear to quit working; upon renew on the testclient, both servers log the following:</div>
<div><br></div>DHCPDISCOVER from 00:50:56:a2:00:06 via eth0: peer holds all free leases<div><br></div><div>If I switch back to static, the address renews properly. It doesn't seem to matter where in my LDAP tree the subclass entries sit. </div>
<div><br></div><div>The following is the generated LDAP config when ldap-method is static. If it would help, I can also provide an LDAP export. Is there any special means of handling subclasses in dynamic config mode? Any insight would be appreciated.</div>
<div><br></div><div><div>default-lease-time 86400;</div><div>max-lease-time 604800;</div><div>log-facility local7;</div><div>deny client-updates;</div><div>authoritative;</div><div>ddns-update-style none;</div><div>option domain-name "<a href="http://bradley.edu">bradley.edu</a>";</div>
<div>option domain-name-servers 192.168.190.100, 192.168.253.10;</div><div>group {</div><div>}</div><div>class "TESTVLAN" {</div><div>match pick-first-value (option dhcp-client-identifier, hardware);</div><div>}</div>
<div>class "Advancement" {</div><div>match pick-first-value (option dhcp-client-identifier, hardware);</div><div>}</div><div>class "Automation" {</div><div>match pick-first-value (option dhcp-client-identifier, hardware);</div>
<div>}</div><div>class "BFundCC" {</div><div>match pick-first-value (option dhcp-client-identifier, hardware);</div><div>}</div><div>class "BU-VOIP1-START" {</div><div>match pick-first-value (option dhcp-client-identifier, hardware);</div>
<div>}</div><div>class "BuildingTech" {</div><div>match pick-first-value (option dhcp-client-identifier, hardware);</div><div>}</div><div>class "Business-Affairs" {</div><div>match pick-first-value (option dhcp-client-identifier, hardware);</div>
<div>}</div><div>class "CAMPUS-VOIP1-START" {</div><div>match pick-first-value (option dhcp-client-identifier, hardware);</div><div>}</div><div>class "CEGT" {</div><div>match pick-first-value (option dhcp-client-identifier, hardware);</div>
<div>}</div><div>class "CFA" {</div><div>match pick-first-value (option dhcp-client-identifier, hardware);</div><div>}</div><div>class "ContEd-CC" {</div><div>match pick-first-value (option dhcp-client-identifier, hardware);</div>
<div>}</div><div>class "EHS" {</div><div>match pick-first-value (option dhcp-client-identifier, hardware);</div><div>}</div><div>class "Enrollment" {</div><div>match pick-first-value (option dhcp-client-identifier, hardware);</div>
<div>}</div><div>class "FCBA" {</div><div>match pick-first-value (option dhcp-client-identifier, hardware);</div><div>}</div><div>class "Gradschool" {</div><div>match pick-first-value (option dhcp-client-identifier, hardware);</div>
<div>}</div><div>class "Hippa" {</div><div>match pick-first-value (option dhcp-client-identifier, hardware);</div><div>}</div><div>class "IRT" {</div><div>match pick-first-value (option dhcp-client-identifier, hardware);</div>
<div>}</div><div>class "Printer-Working" {</div><div>match pick-first-value (option dhcp-client-identifier, hardware);</div><div>}</div><div>class "LAS" {</div><div>match pick-first-value (option dhcp-client-identifier, hardware);</div>
<div>}</div><div>class "Pres-Prov" {</div><div>match pick-first-value (option dhcp-client-identifier, hardware);</div><div>}</div><div>class "QuickCard" {</div><div>match pick-first-value (option dhcp-client-identifier, hardware);</div>
<div>}</div><div>class "Registrar" {</div><div>match pick-first-value (option dhcp-client-identifier, hardware);</div><div>}</div><div>class "Sharp" {</div><div>match pick-first-value (option dhcp-client-identifier, hardware);</div>
<div>}</div><div>class "Staff" {</div><div>match pick-first-value (option dhcp-client-identifier, hardware);</div><div>}</div><div>class "VPN-Working" {</div><div>match pick-first-value (option dhcp-client-identifier, hardware);</div>
<div>}</div><div>class "WAP" {</div><div>match pick-first-value (option dhcp-client-identifier, hardware);</div><div>}</div><div>class "Wireless-Working" {</div><div>match pick-first-value (option dhcp-client-identifier, hardware);</div>
<div>}</div><div>host testclient1 {</div><div>hardware ethernet 00:50:56:A2:00:06;</div><div>option dhcp-client-identifier 1:00:50:56:A2:00:06;</div><div>}</div><div>subclass "IRT" 1:00:50:56:A2:00:06 {</div><div>
}</div><div>subclass "IRT" 00:50:56:A2:00:06 {</div><div>}</div><div>group {</div><div>shared-network "Bradley-Network" {</div><div>subnet 192.168.136.0 netmask 255.255.255.0 {</div><div>pool {</div><div>
range 192.168.136.200 192.168.136.210;</div><div>deny unknown-clients;</div><div>failover peer "dhcp-failover";</div><div>allow members of "TESTVLAN";</div><div>option routers 192.168.136.1;</div><div>
}</div><div>}</div><div>subnet 10.1.1.0 netmask 255.255.255.0 {</div><div>pool {</div><div>range 10.1.1.100 10.1.1.200;</div><div>allow unknown-clients;</div><div>failover peer "dhcp-failover";</div><div>option routers 10.1.1.1;</div>
<div>}</div><div>}</div><div>subnet 10.217.217.0 netmask 255.255.255.0 {</div><div>option routers 10.217.217.1;</div><div>pool {</div><div>range 10.217.217.6 10.217.217.254;</div><div>deny unknown-clients;</div><div>failover peer "dhcp-failover";</div>
<div>allow members of "BU-VOIP1-START";</div><div>}</div><div>}</div><div>subnet 10.52.52.0 netmask 255.255.255.0 {</div><div>option routers 10.52.52.1;</div><div>pool {</div><div>range 10.52.52.16 10.52.52.254;</div>
<div>deny unknown-clients;</div><div>failover peer "dhcp-failover";</div><div>allow members of "CAMPUS-VOIP1-START";</div><div>}</div><div>}</div><div>subnet 192.168.4.0 netmask 255.255.252.0 {</div><div>
option routers 192.168.4.1;</div><div>pool {</div><div>range 192.168.4.16 192.168.4.254;</div><div>deny unknown-clients;</div><div>failover peer "dhcp-failover";</div><div>range 192.168.5.16 192.168.5.254;</div>
<div>range 192.168.6.2 192.168.6.254;</div><div>range 192.168.7.16 192.168.7.254;</div><div>allow members of "WAP";</div><div>}</div><div>}</div><div>subnet 192.168.128.0 netmask 255.255.248.0 {</div><div>option routers 192.168.128.1;</div>
<div>pool {</div><div>range 192.168.128.16 192.168.128.254;</div><div>deny unknown-clients;</div><div>failover peer "dhcp-failover";</div><div>range 192.168.129.16 192.168.129.254;</div><div>range 192.168.130.16 192.168.130.254;</div>
<div>range 192.168.131.16 192.168.131.254;</div><div>range 192.168.132.16 192.168.132.254;</div><div>allow members of "Wireless-Working";</div><div>}</div><div>}</div><div>subnet 192.168.144.0 netmask 255.255.248.0 {</div>
<div>option routers 192.168.144.1;</div><div>pool {</div><div>range 192.168.144.16 192.168.144.254;</div><div>deny unknown-clients;</div><div>failover peer "dhcp-failover";</div><div>allow members of "VPN-Working";</div>
<div>}</div><div>}</div><div>subnet 192.168.152.0 netmask 255.255.255.0 {</div><div>option routers 192.168.152.1;</div><div>pool {</div><div>range 192.168.152.16 192.168.152.254;</div><div>deny unknown-clients;</div><div>
failover peer "dhcp-failover";</div><div>allow members of "Sharp";</div><div>}</div><div>}</div><div>subnet 192.168.160.0 netmask 255.255.252.0 {</div><div>option routers 192.168.160.1;</div><div>pool {</div>
<div>range 192.168.161.16 192.168.161.254;</div><div>deny unknown-clients;</div><div>failover peer "dhcp-failover";</div><div>range 192.168.162.16 192.168.162.31;</div><div>range 192.168.162.131 192.168.162.254;</div>
<div>allow members of "Staff";</div><div>}</div><div>}</div><div>subnet 192.168.167.64 netmask 255.255.255.192 {</div><div>option routers 192.168.167.65;</div><div>pool {</div><div>range 192.168.167.96 192.168.167.126;</div>
<div>deny unknown-clients;</div><div>failover peer "dhcp-failover";</div><div>allow members of "ContEd-CC";</div><div>}</div><div>}</div><div>subnet 192.168.168.0 netmask 255.255.248.0 {</div><div>option routers 192.168.168.1;</div>
<div>pool {</div><div>range 192.168.172.16 192.168.172.254;</div><div>deny unknown-clients;</div><div>failover peer "dhcp-failover";</div><div>allow members of "CEGT";</div><div>}</div><div>pool {</div>
<div>range 192.168.170.16 192.168.170.254;</div><div>deny unknown-clients;</div><div>failover peer "dhcp-failover";</div><div>allow members of "CFA";</div><div>}</div><div>pool {</div><div>range 192.168.171.16 192.168.171.254;</div>
<div>deny unknown-clients;</div><div>failover peer "dhcp-failover";</div><div>allow members of "EHS";</div><div>}</div><div>pool {</div><div>range 192.168.169.16 192.168.169.254;</div><div>deny unknown-clients;</div>
<div>failover peer "dhcp-failover";</div><div>allow members of "FCBA";</div><div>}</div><div>pool {</div><div>range 192.168.174.16 192.168.174.254;</div><div>deny unknown-clients;</div><div>failover peer "dhcp-failover";</div>
<div>allow members of "Gradschool";</div><div>}</div><div>pool {</div><div>range 192.168.173.16 192.168.173.254;</div><div>deny unknown-clients;</div><div>failover peer "dhcp-failover";</div><div>allow members of "LAS";</div>
<div>}</div><div>}</div><div>subnet 192.168.234.0 netmask 255.255.255.0 {</div><div>option routers 192.168.234.1;</div><div>pool {</div><div>range 192.168.234.67 192.168.234.120;</div><div>deny unknown-clients;</div><div>
failover peer "dhcp-failover";</div><div>allow members of "Hippa";</div><div>}</div><div>}</div><div>subnet 192.168.236.0 netmask 255.255.255.192 {</div><div>option routers 192.168.236.1;</div><div>pool {</div>
<div>range 192.168.236.3 192.168.236.62;</div><div>deny unknown-clients;</div><div>failover peer "dhcp-failover";</div><div>allow members of "BFundCC";</div><div>}</div><div>}</div><div>subnet 192.168.237.0 netmask 255.255.255.0 {</div>
<div>option routers 192.168.237.1;</div><div>pool {</div><div>range 192.168.237.16 192.168.237.150;</div><div>deny unknown-clients;</div><div>failover peer "dhcp-failover";</div><div>allow members of "Automation";</div>
<div>}</div><div>}</div><div>subnet 192.168.238.0 netmask 255.255.255.0 {</div><div>option routers 192.168.238.1;</div><div>pool {</div><div>range 192.168.238.16 192.168.238.254;</div><div>deny unknown-clients;</div><div>
failover peer "dhcp-failover";</div><div>allow members of "QuickCard";</div><div>}</div><div>}</div><div>subnet 192.168.228.0 netmask 255.255.252.0 {</div><div>option routers 192.168.228.1;</div><div>pool {</div>
<div>range 192.168.228.16 192.168.231.254;</div><div>deny unknown-clients;</div><div>failover peer "dhcp-failover";</div><div>allow members of "BuildingTech";</div><div>}</div><div>}</div><div>subnet 192.168.176.0 netmask 255.255.248.0 {</div>
<div>option routers 192.168.176.1;</div><div>pool {</div><div>range 192.168.178.16 192.168.178.254;</div><div>deny unknown-clients;</div><div>failover peer "dhcp-failover";</div><div>allow members of "Advancement";</div>
<div>}</div><div>pool {</div><div>range 192.168.177.16 192.168.177.254;</div><div>deny unknown-clients;</div><div>failover peer "dhcp-failover";</div><div>allow members of "Business-Affairs";</div><div>
}</div><div>pool {</div><div>range 192.168.180.16 192.168.180.254;</div><div>deny unknown-clients;</div><div>failover peer "dhcp-failover";</div><div>allow members of "Enrollment";</div><div>}</div><div>
pool {</div><div>range 192.168.176.101 192.168.176.254;</div><div>deny unknown-clients;</div><div>failover peer "dhcp-failover";</div><div>allow members of "Pres-Prov";</div><div>}</div><div>pool {</div>
<div>range 192.168.179.16 192.168.179.254;</div><div>deny unknown-clients;</div><div>failover peer "dhcp-failover";</div><div>allow members of "Registrar";</div><div>}</div><div>}</div><div>subnet 192.168.184.0 netmask 255.255.248.0 {</div>
<div>option routers 192.168.184.1;</div><div>pool {</div><div>range 192.168.185.16 192.168.185.254;</div><div>failover peer "dhcp-failover";</div><div>range 192.168.186.16 192.168.186.254;</div><div>range 192.168.187.16 192.168.187.31;</div>
<div>allow members of "IRT";</div><div>deny unknown-clients;</div><div>}</div><div>pool {</div><div>range 192.168.191.16 192.168.191.254;</div><div>deny unknown-clients;</div><div>failover peer "dhcp-failover";</div>
<div>allow members of "Printer-Working";</div><div>}</div><div>}</div><div>}</div><div>}</div><div><br></div><div><br></div>-- <br><div>Jason K. Brandt</div><div>Systems Administrator</div><div>Bradley University<br>
<br></div>
</div></div>