<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    The class name in the allow statement should be in double-quotes:<br>
    <font color="#993300"><tt># ------------------</tt><tt><br>
      </tt><tt>    pool6 {</tt><tt><br>
      </tt><tt>        allow members of "Microsoft";</tt><tt><br>
      </tt><tt>        range6 2603:xxxx:yyyy:zzzz:4:50f7::  
        2603:xxxx:yyyy:zzzz:4:50f7::ff;</tt><tt><br>
      </tt><tt>    }</tt><tt><br>
      </tt><tt># ------------------</tt><tt><br>
      </tt></font><br>
    This works on dhcp-server-4.3.2-8.fc22.x86_64<br>
    <br>
    Bill<br>
    <br>
    <div class="moz-cite-prefix">On 1/26/2018 4:32 AM, Peter Balsianok
      wrote:<br>
    </div>
    <blockquote type="cite"
cite="mid:CANNcOyy6W1fd-2LgTJk_oasMvDsor4ciJdC7X+n+d1gHXUr-kA@mail.gmail.com">
      <div dir="ltr">
        <div>
          <div>
            <div>
              <div>Thank you for the answer :).<br>
                <br>
              </div>
              I have tried to make some restriction. Here is my
              approach:<br>
              <br>
              class "N-005-BA-OLT-02"<br>
              {<br>
                match if substring (option dhcp6.interface-id, 0, 15) =
              "N-005-BA-OLT-02";<br>
              }<br>
              <br>
              #06/06/2017 zoznam komplet subnetov nie len pre SK region<br>
#---------------------------------------------------------------------------------------------<br>
               subnet6 2a01:c840:0070:0140::/64 {<br>
                 prefix6 2A01:C846:140:: 2A01:C846:17F:F000:: /56;<br>
                 # N-005-BA-OLT-02<br>
                 option dhcp6.aftr-name
              61:61:66:74:72:32:2e:61:75:72:6f:2e:6f:72:61:6e:67:65:2e:73:6b
              ;<br>
                 # <a href="http://aaftr2.auro.orange.sk"
                moz-do-not-send="true">aaftr2.auro.orange.sk</a><br>
                 option dhcp6.name-servers 2a01:c840:110:c000::10 ,
              2a01:c840:130:c000::10 ;<br>
                 allow members of N-005-BA-OLT-02;<br>
                 deny all clients;<br>
               }<br>
              <br>
            </div>
            <div>I was unable to run dhcp sevrer.<br>
            </div>
            <div><br>
              <br>
            </div>
            Then i checked source code:<br>
            /* allow-deny-keyword :== BOOTP<br>
                    | BOOTING<br>
                  | DYNAMIC_BOOTP<br>
                  | UNKNOWN_CLIENTS */<br>
            <br>
          </div>
          Currect version doesnt support "allow members of ..." :(.<br>
          <br>
        </div>
        Any idea?<br>
        <div>
          <div>
            <div><br>
              <br>
            </div>
          </div>
        </div>
      </div>
      <div class="gmail_extra"><br>
        <div class="gmail_quote">On Fri, Jan 26, 2018 at 1:24 AM, Bill
          Shirley <span dir="ltr"><<a
              href="mailto:bill@c3po.polymerindustries.biz"
              target="_blank" moz-do-not-send="true">bill@c3po.polymerindustries.biz</a>></span>
          wrote:<br>
          <blockquote class="gmail_quote" style="margin:0 0 0
            .8ex;border-left:1px #ccc solid;padding-left:1ex">
            <div text="#000000" bgcolor="#FFFFFF"> As I see it, you have
              no restrictions on either subnet so DHCP is<br>
              free to allocate from either one.<br>
              <br>
              Bill
              <div>
                <div class="h5"><br>
                  <br>
                  <br>
                  <div class="m_-4996554198750595892moz-cite-prefix">On
                    1/25/2018 10:22 AM, Peter Balsianok wrote:<br>
                  </div>
                </div>
              </div>
              <blockquote type="cite">
                <div>
                  <div class="h5">
                    <div dir="ltr">
                      <div>
                        <div>Hi,<br>
                          <br>
                        </div>
                        We have following configuration for ISC DHCPv6:<br>
                        <br>
                        omapi-port 8913;<br>
                        ddns-update-style none;<br>
                        ping-check off;<br>
                        authoritative;<br>
                        default-lease-time 604800;<br>
                        max-lease-time 604800;<br>
                        log-facility local3;<br>
                        preferred-lifetime 259200;<br>
                        option dhcp6.info-refresh-time 129600;<br>
                        option dhcp6.aftr-name code 64 = string;<br>
                        <br>
                        deny duplicates;<br>
                        one-lease-per-client on;<br>
                        <br>
                        #dhcp01<br>
                        subnet6 2a01:c840:110:8004::229/128 {<br>
                        }<br>
                        subnet6 2a01:c840:110:8004::230/128 {<br>
                        }<br>
                        subnet6 2a01:c840:110:8004::228/128 {<br>
                        }<br>
                        #dhcp02<br>
                        subnet6 2a01:c840:130:8004::20/128 {<br>
                        }<br>
                        subnet6 2a01:c840:130:8004::21/128 {<br>
                        }<br>
                        subnet6 2a01:c840:130:8004::19/128 {<br>
                        }<br>
                        <br>
                        #testovaci subnet 1<br>
                        subnet6 2a01:c840:50:5000::/62 {<br>
                          prefix6 2a01:c840:0050:2000::
                        2a01:c840:0050:2300:: /56;<br>
                          #prefix6 2a01:c840:0050:2400::
                        2a01:c840:0050:2700:: /56; #dedicated for static
                        assigement<br>
                          # Additional options<br>
                          # aftr je <a
                          href="http://aftr2.auro.orange.sk"
                          target="_blank" moz-do-not-send="true">aftr2.auro.orange.sk</a><br>
                          option dhcp6.aftr-name
                        05:61:66:74:72:32:04:61:75:72:<wbr>6f:06:6f:72:61:6e:67:65:02:73:<wbr>6b:00;<br>
                          option dhcp6.name-servers
                        2a01:c840:130:c000::10, 2a01:c840:110:c000::10;<br>
                        }<br>
                        <br>
                      </div>
                      <div>#test subnet2<br>
                      </div>
                      <div> subnet6 2a01:c840:0070:0140::/64 {<br>
                           prefix6 2A01:C846:140:: 2A01:C846:17F:F000::
                        /56;<br>
                           # N-005-BA-OLT-02<br>
                           option dhcp6.aftr-name
                        61:61:66:74:72:32:2e:61:75:72:<wbr>6f:2e:6f:72:61:6e:67:65:2e:73:<wbr>6b
                        ;<br>
                           # <a href="http://aaftr2.auro.orange.sk"
                          target="_blank" moz-do-not-send="true">aaftr2.auro.orange.sk</a><br>
                           option dhcp6.name-servers
                        2a01:c840:110:c000::10 , 2a01:c840:130:c000::10
                        ;<br>
                         }<br>
                        <br>
                      </div>
                      <div>I am testing following scenarion:<br>
                      </div>
                      <div>- two relay agent exists (one for subnet1 and
                        second from subnet 2)<br>
                      </div>
                      <div>- i try to migrate device from subnet2 into
                        subnet1. I suppose that i will get another
                        prefix delegation. But as you can see in the
                        debug messages, it doesnt work.<br>
                        <br>
                      </div>
                      <div>Could you help me please? Thx<br>
                      </div>
                      <div><br>
                        <br>
                        <br>
                      </div>
                      Here are log messages:<br>
                      20180125155309 dhcp01 dhcpd-zk-inet: Internet
                      Systems Consortium DHCP Server 4.3.6<br>
                      20180125155309 dhcp01 dhcpd-zk-inet: Copyright
                      2004-2017 Internet Systems Consortium.<br>
                      20180125155309 dhcp01 dhcpd-zk-inet: All rights
                      reserved.<br>
                      20180125155309 dhcp01 dhcpd-zk-inet: For info,
                      please visit <a
                        href="https://www.isc.org/software/dhcp/"
                        target="_blank" moz-do-not-send="true">https://www.isc.org/software/<wbr>dhcp/</a><br>
                      20180125155309 dhcp01 dhcpd-zk-inet: Wrote 0
                      deleted host decls to leases file.<br>
                      20180125155309 dhcp01 dhcpd-zk-inet: Wrote 0 new
                      dynamic host decls to leases file.<br>
                      20180125155309 dhcp01 dhcpd-zk-inet: Wrote 0 NA, 0
                      TA, 1 PD leases to lease file.<br>
                      20180125155309 dhcp01 dhcpd-zk-inet: Bound to
                      *:547<br>
                      20180125155309 dhcp01 dhcpd-zk-inet: Listening on
                      Socket/5/zk-inet0/2a01:c840:<wbr>110:8004::228/128<br>
                      20180125155309 dhcp01 dhcpd-zk-inet: Sending on  
                      Socket/5/zk-inet0/2a01:c840:<wbr>110:8004::228/128<br>
                      20180125155309 dhcp01 dhcpd-zk-inet: Server
                      starting service.<br>
                      20180125155311 dhcp01 dhcpd-zk-inet: Relay-forward
                      message from 2a01:c840:70:140::1 port 547, link
                      address 2a01:c840:70:140::1, peer address
                      fe80::427d:fff:fe99:4727<br>
                      20180125155311 dhcp01 dhcpd-zk-inet: Picking pool
                      prefix 2a01:c846:17f:f000::/56<br>
                      20180125155311 dhcp01 dhcpd-zk-inet: Advertise PD:
                      address 2a01:c846:17f:f000::/56 to client with
                      duid 00:03:00:01:40:7d:0f:99:47:27 iaid = 0 valid
                      for 604800 seconds<br>
                      20180125155311 dhcp01 dhcpd-zk-inet: Sending
                      Relay-reply to 2a01:c840:70:140::1 port 547<br>
                      20180125155312 dhcp01 dhcpd-zk-inet: Relay-forward
                      message from 2a01:c840:70:140::1 port 547, link
                      address 2a01:c840:70:140::1, peer address
                      fe80::427d:fff:fe99:4727<br>
                      20180125155312 dhcp01 dhcpd-zk-inet: Reply PD:
                      address 2a01:c846:17f:f000::/56 to client with
                      duid 00:03:00:01:40:7d:0f:99:47:27 iaid = 0 valid
                      for 604800 seconds<br>
                      20180125155312 dhcp01 dhcpd-zk-inet: Sending
                      Relay-reply to 2a01:c840:70:140::1 port 547<br>
                      20180125160001 dhcp01 dhcpd-zk-inet: Relay-forward
                      message from 2a01:c840:70:140::1 port 547, link
                      address 2a01:c840:70:140::1, peer address
                      fe80::427d:fff:fe99:4727<br>
                      20180125160001 dhcp01 dhcpd-zk-inet: Advertise PD:
                      address 2a01:c846:17f:f000::/56 to client with
                      duid 00:03:00:01:40:7d:0f:99:47:27 iaid = 0 valid
                      for 604800 seconds<br>
                      20180125160001 dhcp01 dhcpd-zk-inet: Sending
                      Relay-reply to 2a01:c840:70:140::1 port 547<br>
                      20180125160002 dhcp01 dhcpd-zk-inet: Relay-forward
                      message from 2a01:c840:70:140::1 port 547, link
                      address 2a01:c840:70:140::1, peer address
                      fe80::427d:fff:fe99:4727<br>
                      20180125160002 dhcp01 dhcpd-zk-inet: Reply PD:
                      address 2a01:c846:17f:f000::/56 to client with
                      duid 00:03:00:01:40:7d:0f:99:47:27 iaid = 0 valid
                      for 604800 seconds<br>
                      20180125160002 dhcp01 dhcpd-zk-inet: Sending
                      Relay-reply to 2a01:c840:70:140::1 port 547<br>
                      20180125160129 dhcp01 dhcpd-zk-inet: Relay-forward
                      message from 2a01:c840:50:5001::1 port 547, link
                      address 2a01:c840:50:5001::1, peer address
                      fe80::427d:fff:fe99:4727<br>
                      20180125160129 dhcp01 dhcpd-zk-inet: Advertise PD:
                      address 2a01:c846:17f:f000::/56 to client with
                      duid 00:03:00:01:40:7d:0f:99:47:27 iaid = 0 valid
                      for 604800 seconds<br>
                      20180125160129 dhcp01 dhcpd-zk-inet: Sending
                      Relay-reply to 2a01:c840:50:5001::1 port 547<br>
                      20180125160130 dhcp01 dhcpd-zk-inet: Relay-forward
                      message from 2a01:c840:50:5001::1 port 547, link
                      address 2a01:c840:50:5001::1, peer address
                      fe80::427d:fff:fe99:4727<br>
                      20180125160130 dhcp01 dhcpd-zk-inet: Reply PD:
                      address 2a01:c846:17f:f000::/56 to client with
                      duid 00:03:00:01:40:7d:0f:99:47:27 iaid = 0 valid
                      for 604800 seconds<br>
                      20180125160130 dhcp01 dhcpd-zk-inet: Sending
                      Relay-reply to 2a01:c840:50:5001::1 port 547<br>
                      <br>
                    </div>
                    <br>
                    <fieldset
                      class="m_-4996554198750595892mimeAttachmentHeader"></fieldset>
                    <br>
                  </div>
                </div>
                <pre>______________________________<wbr>_________________
dhcp-users mailing list
<a class="m_-4996554198750595892moz-txt-link-abbreviated" href="mailto:dhcp-users@lists.isc.org" target="_blank" moz-do-not-send="true">dhcp-users@lists.isc.org</a>
<a class="m_-4996554198750595892moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/dhcp-users" target="_blank" moz-do-not-send="true">https://lists.isc.org/mailman/<wbr>listinfo/dhcp-users</a></pre>
              </blockquote>
              <br>
            </div>
            <br>
            ______________________________<wbr>_________________<br>
            dhcp-users mailing list<br>
            <a href="mailto:dhcp-users@lists.isc.org"
              moz-do-not-send="true">dhcp-users@lists.isc.org</a><br>
            <a href="https://lists.isc.org/mailman/listinfo/dhcp-users"
              rel="noreferrer" target="_blank" moz-do-not-send="true">https://lists.isc.org/mailman/<wbr>listinfo/dhcp-users</a><br>
          </blockquote>
        </div>
        <br>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
dhcp-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:dhcp-users@lists.isc.org">dhcp-users@lists.isc.org</a>
<a class="moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/dhcp-users">https://lists.isc.org/mailman/listinfo/dhcp-users</a></pre>
    </blockquote>
    <br>
  </body>
</html>