<html><body><div style="font-family: Andale Mono; font-size: 10pt; color: #000000"><div style="font-family: Andale Mono; font-size: 10pt; color: #000000;" data-mce-style="font-family: Andale Mono; font-size: 10pt; color: #000000;"><div><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;">The answer was that I totally missed pool6 {} being a thing in the man pages. So .. this works:</span></div><div><br data-mce-bogus="1"></div><div><div><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;">shared-network SomeNetwork {</span></div><div><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;"> subnet6 2001:0:50:e8::/64 {</span></div><div><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;"> pool6 {</span></div><div><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;"> range6 2001:0:50:e8::1 2001:0:50:e8:7fff:ffff:ffff:fffe;</span></div><div><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;"> prefix6 2001:0:58:: 2001:0:59:: /48;</span></div><div><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;"> min-lease-time 600;</span></div><div><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;"> preferred-lifetime 600;</span></div><div><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;"> default-lease-time 600;</span></div><div><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;"> max-lease-time 600;</span></div><div><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;"> deny unknown-clients;</span></div><div><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;"> }</span></div><div><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;"> }</span></div><div><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;">}</span></div><div><p style="margin: 0px; font-size: 11px; line-height: normal; font-family: Menlo;" data-mce-style="margin: 0px; font-size: 11px; line-height: normal; font-family: Menlo;"><span style="font-variant-ligatures: no-common-ligatures; font-size: 10pt;" data-mce-style="font-variant-ligatures: no-common-ligatures; font-size: 10pt;">host SomeClient {</span></p><p style="margin: 0px; font-size: 11px; line-height: normal; font-family: Menlo;" data-mce-style="margin: 0px; font-size: 11px; line-height: normal; font-family: Menlo;"><span style="font-variant-ligatures: no-common-ligatures; font-size: 10pt;" data-mce-style="font-variant-ligatures: no-common-ligatures; font-size: 10pt;"> host-identifier option dhcp6.client-id 00:01:00:01:1d:52:eb:58:fc:c5:d5:34:ae:e0;</span></p><p style="margin: 0px; font-size: 11px; line-height: normal; font-family: Menlo;" data-mce-style="margin: 0px; font-size: 11px; line-height: normal; font-family: Menlo;"><span style="font-variant-ligatures: no-common-ligatures; font-size: 10pt;" data-mce-style="font-variant-ligatures: no-common-ligatures; font-size: 10pt;">}</span></p></div></div><p style="margin: 0px; font-size: 11px; line-height: normal; font-family: Menlo;" data-mce-style="margin: 0px; font-size: 11px; line-height: normal; font-family: Menlo;"><span style="font-variant-ligatures: no-common-ligatures; font-size: 10pt;" data-mce-style="font-variant-ligatures: no-common-ligatures; font-size: 10pt;"></span></p><div><span style="font-variant-ligatures: no-common-ligatures; font-size: 10pt;" data-mce-style="font-variant-ligatures: no-common-ligatures; font-size: 10pt;"><br></span></div><div><span style="font-variant-ligatures: no-common-ligatures; font-size: 10pt;" data-mce-style="font-variant-ligatures: no-common-ligatures; font-size: 10pt;">to allow only certain clients to get an address.</span></div></div><div style="font-family: Andale Mono; font-size: 10pt; color: #000000;" data-mce-style="font-family: Andale Mono; font-size: 10pt; color: #000000;"><br><hr id="zwchr" data-marker="__DIVIDER__"><div data-marker="__HEADERS__"><blockquote style="border-left: 2px solid #1010FF; margin-left: 5px; padding-left: 5px; color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;" data-mce-style="border-left: 2px solid #1010FF; margin-left: 5px; padding-left: 5px; color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;"><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;"><b>From: </b>"Darren Ankney" <perl-list@network1.net></span><br><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;"><b>To: </b>dhcp-users@lists.isc.org</span><br><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;"><b>Sent: </b>Thursday, November 17, 2016 4:07:48 PM</span><br><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;"><b>Subject: </b>ISC DHCP ... dhcpd -6 and known clients</span><br></blockquote></div><div data-marker="__QUOTED_TEXT__"><blockquote style="border-left: 2px solid #1010FF; margin-left: 5px; padding-left: 5px; color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;" data-mce-style="border-left: 2px solid #1010FF; margin-left: 5px; padding-left: 5px; color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;"><div style="font-family: Andale Mono; font-size: 10pt; color: #000000;" data-mce-style="font-family: Andale Mono; font-size: 10pt; color: #000000;"><div style="font-family: Andale Mono; font-size: 10pt; color: #000000;" data-mce-style="font-family: Andale Mono; font-size: 10pt; color: #000000;"><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;">Folks,</span></div><div style="font-family: Andale Mono; font-size: 10pt; color: #000000;" data-mce-style="font-family: Andale Mono; font-size: 10pt; color: #000000;"><br></div><div style="font-family: Andale Mono; font-size: 10pt; color: #000000;" data-mce-style="font-family: Andale Mono; font-size: 10pt; color: #000000;"><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;">Is it not yet possible to allow/deny unkown clients in DHCPv6?</span></div><div style="font-family: Andale Mono; font-size: 10pt; color: #000000;" data-mce-style="font-family: Andale Mono; font-size: 10pt; color: #000000;"><br></div><div style="font-family: Andale Mono; font-size: 10pt; color: #000000;" data-mce-style="font-family: Andale Mono; font-size: 10pt; color: #000000;"><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;">In dhcpd for DHCPv4, it is possible to do something like this:</span></div><div style="font-family: Andale Mono; font-size: 10pt; color: #000000;" data-mce-style="font-family: Andale Mono; font-size: 10pt; color: #000000;"><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;">---</span></div><div style="font-family: Andale Mono; font-size: 10pt; color: #000000;" data-mce-style="font-family: Andale Mono; font-size: 10pt; color: #000000;"><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;">shared-network SomeNetwork {</span></div><div style="font-family: Andale Mono; font-size: 10pt; color: #000000;" data-mce-style="font-family: Andale Mono; font-size: 10pt; color: #000000;"><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;"> subnet 10.0.0.0 netmask 255.255.255.0 {</span></div><div style="font-family: Andale Mono; font-size: 10pt; color: #000000;" data-mce-style="font-family: Andale Mono; font-size: 10pt; color: #000000;"><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;"> pool {</span></div><div style="font-family: Andale Mono; font-size: 10pt; color: #000000;" data-mce-style="font-family: Andale Mono; font-size: 10pt; color: #000000;"><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;"> range 10.0.0.2 10.0.0.254;</span></div><div style="font-family: Andale Mono; font-size: 10pt; color: #000000;" data-mce-style="font-family: Andale Mono; font-size: 10pt; color: #000000;"><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;"> <span style="font-family: Menlo;" data-mce-style="font-family: Menlo;">deny unknown clients;</span></span></div><div style="font-family: Andale Mono; font-size: 10pt; color: #000000;" data-mce-style="font-family: Andale Mono; font-size: 10pt; color: #000000;"><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;"> }</span></div><div style="font-family: Andale Mono; font-size: 10pt; color: #000000;" data-mce-style="font-family: Andale Mono; font-size: 10pt; color: #000000;"><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;"> }</span></div><div style="font-family: Andale Mono; font-size: 10pt; color: #000000;" data-mce-style="font-family: Andale Mono; font-size: 10pt; color: #000000;"><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;"> subnet 10.160.0.0 netmask 255.255.255.0 {</span></div><div style="font-family: Andale Mono; font-size: 10pt; color: #000000;" data-mce-style="font-family: Andale Mono; font-size: 10pt; color: #000000;"><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;"> pool {</span></div><div style="font-family: Andale Mono; font-size: 10pt; color: #000000;" data-mce-style="font-family: Andale Mono; font-size: 10pt; color: #000000;"><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;"> range 10.160.0.2 10.160.0.254;</span></div><div style="font-family: Andale Mono; font-size: 10pt; color: #000000;" data-mce-style="font-family: Andale Mono; font-size: 10pt; color: #000000;"><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;"> }</span></div><div style="font-family: Andale Mono; font-size: 10pt; color: #000000;" data-mce-style="font-family: Andale Mono; font-size: 10pt; color: #000000;"><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;"> }</span></div><div style="font-family: Andale Mono; font-size: 10pt; color: #000000;" data-mce-style="font-family: Andale Mono; font-size: 10pt; color: #000000;"><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;">}</span></div><div style="font-family: Andale Mono; font-size: 10pt; color: #000000;" data-mce-style="font-family: Andale Mono; font-size: 10pt; color: #000000;"><br></div><div><p style="color: #000000; font-family: Menlo; font-size: 11px; margin: 0px; line-height: normal;" data-mce-style="color: #000000; font-family: Menlo; font-size: 11px; margin: 0px; line-height: normal;"><span style="font-variant-ligatures: no-common-ligatures; font-size: 10pt;" data-mce-style="font-variant-ligatures: no-common-ligatures; font-size: 10pt;">host SomeHost { hardware ethernet 00:01:02:03:04:05; }</span></p><p style="color: #000000; font-family: Menlo; font-size: 11px; margin: 0px; line-height: normal;" data-mce-style="color: #000000; font-family: Menlo; font-size: 11px; margin: 0px; line-height: normal;"><span style="font-variant-ligatures: no-common-ligatures; font-size: 10pt;" data-mce-style="font-variant-ligatures: no-common-ligatures; font-size: 10pt;">---</span></p><p style="color: #000000; font-family: Menlo; font-size: 11px; margin: 0px; line-height: normal;" data-mce-style="color: #000000; font-family: Menlo; font-size: 11px; margin: 0px; line-height: normal;"><span style="font-variant-ligatures: no-common-ligatures; font-size: 10pt;" data-mce-style="font-variant-ligatures: no-common-ligatures; font-size: 10pt;"><br></span></p><p style="color: #000000; font-family: Menlo; font-size: 11px; margin: 0px; line-height: normal;" data-mce-style="color: #000000; font-family: Menlo; font-size: 11px; margin: 0px; line-height: normal;"><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;"><span style="font-variant-ligatures: no-common-ligatures;" data-mce-style="font-variant-ligatures: no-common-ligatures;">With the above config, the specified host of </span>00:01:02:03:04:05 would get an address out of the 10.0.0.0/24 range while a non-specified host of 00:10:20:30:40:50 would get an address out of 10.160.0.0/24</span></p><p style="color: #000000; font-family: Menlo; font-size: 11px; margin: 0px; line-height: normal;" data-mce-style="color: #000000; font-family: Menlo; font-size: 11px; margin: 0px; line-height: normal;"><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;"><br></span></p><p style="color: #000000; font-family: Menlo; font-size: 11px; margin: 0px; line-height: normal;" data-mce-style="color: #000000; font-family: Menlo; font-size: 11px; margin: 0px; line-height: normal;"><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;">Trying something similar in DHCPv6 (dhcpd -6) does not seem to produce the same behavior:</span></p><p style="color: #000000; font-family: Menlo; font-size: 11px; margin: 0px; line-height: normal;" data-mce-style="color: #000000; font-family: Menlo; font-size: 11px; margin: 0px; line-height: normal;"><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;"><br></span></p><p style="color: #000000; font-family: Menlo; font-size: 11px; margin: 0px; line-height: normal;" data-mce-style="color: #000000; font-family: Menlo; font-size: 11px; margin: 0px; line-height: normal;"><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;">---</span></p><p style="margin: 0px; line-height: normal;" data-mce-style="margin: 0px; line-height: normal;"><span style="font-family: Menlo; font-size: 10pt;" data-mce-style="font-family: Menlo; font-size: 10pt;">shared-network FNGipv6Test {</span></p><p style="margin: 0px; line-height: normal;" data-mce-style="margin: 0px; line-height: normal;"><span style="font-family: Menlo; font-size: 10pt;" data-mce-style="font-family: Menlo; font-size: 10pt;"> subnet6 2001:0:50:e8::/64 {</span></p><p style="margin: 0px; line-height: normal;" data-mce-style="margin: 0px; line-height: normal;"><span style="font-family: Menlo; font-size: 10pt;" data-mce-style="font-family: Menlo; font-size: 10pt;"> range6 2001:0:50:e8::1 2001:0:50:e8:7fff:ffff:ffff:fffe;</span></p><p style="margin: 0px; line-height: normal;" data-mce-style="margin: 0px; line-height: normal;"><span style="font-family: Menlo; font-size: 10pt;" data-mce-style="font-family: Menlo; font-size: 10pt;"> prefix6 2001:0:58:: 2001:0:59:: /48;</span></p><p style="margin: 0px; line-height: normal;" data-mce-style="margin: 0px; line-height: normal;"><span style="font-family: Menlo; font-size: 10pt;" data-mce-style="font-family: Menlo; font-size: 10pt;"> min-lease-time 600;</span></p><p style="margin: 0px; line-height: normal;" data-mce-style="margin: 0px; line-height: normal;"><span style="font-family: Menlo; font-size: 10pt;" data-mce-style="font-family: Menlo; font-size: 10pt;"> preferred-lifetime 600;</span></p><p style="margin: 0px; line-height: normal;" data-mce-style="margin: 0px; line-height: normal;"><span style="font-family: Menlo; font-size: 10pt;" data-mce-style="font-family: Menlo; font-size: 10pt;"> default-lease-time 600;</span></p><p style="margin: 0px; line-height: normal;" data-mce-style="margin: 0px; line-height: normal;"><span style="font-family: Menlo; font-size: 10pt;" data-mce-style="font-family: Menlo; font-size: 10pt;"> max-lease-time 600;</span></p><p style="margin: 0px; line-height: normal;" data-mce-style="margin: 0px; line-height: normal;"><span style="font-family: Menlo; font-size: 10pt;" data-mce-style="font-family: Menlo; font-size: 10pt;"> deny unknown-clients;</span></p><p style="margin: 0px; line-height: normal;" data-mce-style="margin: 0px; line-height: normal;"><span style="font-family: Menlo; font-size: 10pt;" data-mce-style="font-family: Menlo; font-size: 10pt;"> }</span></p><p style="margin: 0px; line-height: normal;" data-mce-style="margin: 0px; line-height: normal;"><span style="font-family: Menlo; font-size: 10pt;" data-mce-style="font-family: Menlo; font-size: 10pt;"></span></p><p style="margin: 0px; line-height: normal;" data-mce-style="margin: 0px; line-height: normal;"></p><p style="margin: 0px; line-height: normal;" data-mce-style="margin: 0px; line-height: normal;"><span style="font-family: Menlo; font-size: 10pt;" data-mce-style="font-family: Menlo; font-size: 10pt;">}</span></p><div style="color: #000000; font-family: 'Andale Mono'; font-size: 10pt;" data-mce-style="color: #000000; font-family: 'Andale Mono'; font-size: 10pt;"><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;">---</span></div><div style="color: #000000; font-family: 'Andale Mono'; font-size: 10pt;" data-mce-style="color: #000000; font-family: 'Andale Mono'; font-size: 10pt;"><br></div><div style="color: #000000; font-family: 'Andale Mono'; font-size: 10pt;" data-mce-style="color: #000000; font-family: 'Andale Mono'; font-size: 10pt;"><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;">with no hosts defined, everyone can get an address. The first thing I noticed was that using 'deny unknown clients;' produced a config error:</span></div><div style="color: #000000; font-family: 'Andale Mono'; font-size: 10pt;" data-mce-style="color: #000000; font-family: 'Andale Mono'; font-size: 10pt;"><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;">---</span></div><div><div><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;">/etc/dhcpd6.conf line 9: expecting allow/deny key</span></div><div><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;"><span class="Apple-tab-span" style="white-space: pre;" data-mce-style="white-space: pre;"> </span>deny unknown </span></div><div><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;"> ^</span></div><div><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;">---</span></div><br><div><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;">but did not produce an error when specified as 'deny unknown-clients;'. It did not, however, deny clients. All clients were able to get addresses and prefix delegations with no problems despite having no declarations in the config causing them to be 'known'.</span></div><br><br></div></div></div><br><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;">_______________________________________________</span><br><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;">dhcp-users mailing list</span><br><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;">dhcp-users@lists.isc.org</span><br><span style="font-size: 10pt;" data-mce-style="font-size: 10pt;">https://lists.isc.org/mailman/listinfo/dhcp-users</span></blockquote></div></div><br></div></body></html>