<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
On 25-11-2014 16:58, Simon Hobson wrote:<br>
<blockquote
cite="mid:D410BDB2-1716-498C-9CB7-4CDBF4FD39B4@thehobsons.co.uk"
type="cite">
<pre wrap="">Márcio Merlone <a class="moz-txt-link-rfc2396E" href="mailto:marcio.merlone@a1.ind.br"><marcio.merlone@a1.ind.br></a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">What happens is that the clsDesktop host 08:00:27:12:34:56 ends up on the unknown hosts subnet instead of the 10.1.1.0/24 as desired. First question: is a subClassed host a "known-host" so I can, for example, deny it on the pool declaration? Why does the host flees the clsDesktop pool declaration? What am I missing?
Appreciate if someone can enlighten me on the subject and how to achieve this goal.
</pre>
</blockquote>
<pre wrap="">...
</pre>
<blockquote type="cite">
<pre wrap="">class "clsDesktop" {
match pick-first-value (option dhcp-client-identifier, hardware);
}
class "clsGuest" {
match pick-first-value (option dhcp-client-identifier, hardware);
}
shared-network Foo {
subnet 10.1.1.0 netmask 255.255.255.0 {
pool {
allow members of "clsDesktop";
range 10.1.1.20 10.1.1.254;
}
}
subnet 10.0.0.0 netmask 255.255.255.0 {
pool {
allow members of "clsGuest";
range 10.0.0.46 10.0.0.254;
}
}
subnet 172.16.0.0 netmask 255.255.255.0 {
pool {
allow unknown-clients;
range 172.16.0.1 172.16.0.254;
}
}
}
subclass "clsDesktop" 1:08:00:27:12:34:56 { }
</pre>
</blockquote>
<pre wrap="">
Change the last one to :
subnet 172.16.0.0 netmask 255.255.255.0 {
pool {
deny members of "clsDesktop";
deny members of "clsGuest";
range 172.16.0.1 172.16.0.254;
}
}</pre>
</blockquote>
(...)<br>
<blockquote type="cite">
<pre wrap=""> So simply deny members of each class that have other pools allocated to them.</pre>
</blockquote>
<br>
That seems to work, will do more tests tomorrow. I can say that on
other opportunity I've seen clsDesktop going into clsGuest subnet
when not "deny"ing other classes, and got "no free lease" when
trying to lock everything. I'll elaborate better tomorrow after more
testing.<br>
<br>
<blockquote
cite="mid:D410BDB2-1716-498C-9CB7-4CDBF4FD39B4@thehobsons.co.uk"
type="cite">
<pre wrap="">It's the easiest way to do it, AFAIK clients matching a class/subclass don't automatically become known.
</pre>
</blockquote>
That's important to know, someone with proper knowledge could please
confirm that?<br>
<br>
<blockquote
cite="mid:D410BDB2-1716-498C-9CB7-4CDBF4FD39B4@thehobsons.co.uk"
type="cite">
<pre wrap="">Also, as an observation, for this subnet you don't have provision for a router (...)</pre>
</blockquote>
I know, this is just a lab network, with most of is declarations
stripped off to make it simpler for now. Thanks for the heads up! :)<br>
<br>
Thanks, regards.<br>
<br>
<div class="moz-signature">-- <br>
<style type="text/css">
#a1AssinaturaEmail { font-family: Tahoma, Verdana, Arial; font-size: 10px; }
#a1AssinaturaEmail * { font-family: Tahoma, Verdana, Arial; font-size: 10px; }
#a1AssinaturaEmail a { text-decoration: none; color: #FF9900; }
</style>
<div id="a1AssinaturaEmail"> <span style="font-size: 12px;"><b>Marcio
Merlone</b></span><br>
</div>
</div>
</body>
</html>