<div dir="ltr">With lots of subnets, all using failover, I see this error fairly often. I am using a vendor IPAM solution, so my fix is to remove the failover server from the subnet config, push out new dhcpd.conf files, then put it back and push again. Under the covers, that actually does:<div>- Remove the subnet completely from the second server, and reload dhcpd. The server will drop all the leases for that subnet since the subnet is gone.</div><div>- Remove the "failover" line for that subnet on the primary server and reload dhcp.</div><div>- Add the failover line back in and reload the primary.</div><div>- Add the subnet to the secondary again.</div><div><br></div><div>That is what works for me.<br clear="all"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><br>-- <br>Bob Harold</div><div>DNS and DHCP Hostmaster - UMNet<br>Information and Technology Services (ITS)<br><a href="mailto:rharolde@umich.edu" target="_blank">rharolde@umich.edu</a> <br></div></div></div></div></div></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Aug 17, 2021 at 9:57 AM Abdul Khader <<a href="mailto:akhader@gmail.com">akhader@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="auto"><div>Hi Kraishak</div><div dir="auto">Check the communication is happening on port 647 on both the servers using tcpdump -i any port 647</div><div dir="auto">Please also check if there are multiple entries my state and partner state. Feel both the servers are not in sync. Can you also check if the discovers from client is landing on both the servers ? If you are using split 128 then the traffic should land on both the Nodes. Check your ip helper (relay) to make sure it's configured to send to both the Nodes.</div><div dir="auto"><br></div><div dir="auto">Regards</div><div dir="auto"><br><br><div class="gmail_quote" dir="auto"><div dir="ltr" class="gmail_attr">On Tue, 17 Aug 2021, 17:11 Kraishak Mahtha, <<a href="mailto:kraishak.edu@gmail.com" target="_blank">kraishak.edu@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Hi <span style="color:rgb(32,33,36);font-size:0.875rem;letter-spacing:0.2px;font-family:Roboto,RobotoDraft,Helvetica,Arial,sans-serif;white-space:nowrap">Abdul Khader,</span><div><span style="color:rgb(32,33,36);font-size:0.875rem;letter-spacing:0.2px;font-family:Roboto,RobotoDraft,Helvetica,Arial,sans-serif;white-space:nowrap"><br></span></div><div><span style="color:rgb(32,33,36);font-size:0.875rem;letter-spacing:0.2px;font-family:Roboto,RobotoDraft,Helvetica,Arial,sans-serif;white-space:nowrap">I have declared as follows:</span></div><div><br></div><div><font color="#202124" face="Roboto, RobotoDraft, Helvetica, Arial, sans-serif"><span style="font-size:14px;letter-spacing:0.2px;white-space:nowrap">Configuration file from primary</span></font></div><div><font color="#202124" face="Roboto, RobotoDraft, Helvetica, Arial, sans-serif"><span style="font-size:14px;letter-spacing:0.2px;white-space:nowrap">=========================</span></font></div><div>failover peer "peer-host" {<br> primary;<br> address 192.168.56.156;<br> port 647;<br> peer address 192.168.56.178;<br> peer port 647;<br> max-response-delay 30;<br> max-unacked-updates 30;<br> load balance max seconds 3;<br> mclt 1800;<br> split 128;<br>}<br></div><div>subnet 192.168.56.0 netmask 255.255.255.0 {<br> pool {<br> failover peer "peer-host";<br> range 192.168.56.5 192.168.56.54;<br> }<br> option domain-name "<a href="http://test.com" rel="noreferrer" target="_blank">test.com</a>";<br> option routers 192.168.56.1;<br> option subnet-mask 255.255.255.0;<br> }<span style="color:rgb(32,33,36);font-size:0.875rem;letter-spacing:0.2px;font-family:Roboto,RobotoDraft,Helvetica,Arial,sans-serif;white-space:nowrap"><br></span></div><div><br></div><div>Configuration file from failover</div><div>======================</div><div>failover peer "peer-host" {<br> secondary;<br> address 192.168.56.178;<br> port 647;<br> peer address 192.168.56.156;<br> peer port 647;<br> max-response-delay 30;<br> max-unacked-updates 30;<br> load balance max seconds 3;<br>}<br></div><div>subnet 192.168.56.0 netmask 255.255.255.0 {<br> pool {<br> failover peer "peer-host";<br> range 192.168.56.5 192.168.56.54;<br> }<br> option domain-name "<a href="http://test.com" rel="noreferrer" target="_blank">test.com</a>";<br> option routers 192.168.56.1;<br> option subnet-mask 255.255.255.0;<br> }<br></div><div><br></div><div>On the primary log it shows as :<b> total 50 free 0 backup 0</b> </div><div><b>Aug 17 17:15:48 dhcp1 dhcpd[12130]: peer peer-host: Got POOLREQ, answering negatively! Peer may be out of leases or database inconsistent.</b><br></div><div><b><br></b></div><div>but in the failover log it shows as <b><br></b></div><div>Aug 17 17:14:48 dhcp2 dhcpd[1902]: balancing pool bf05b0 <a href="http://192.168.56.0/24" rel="noreferrer" target="_blank">192.168.56.0/24</a> <b>total 50 free 50 backup 0 lts -25 max-own (+/-)5 </b> (requesting peer rebalance!)<br>Aug 17 17:14:48 dhcp2 dhcpd[1902]: balanced pool bf05b0 <a href="http://192.168.56.0/24" rel="noreferrer" target="_blank">192.168.56.0/24</a> total 50 free 50 backup 0 lts -25 max-misbal 8<br> pool response: 0 leases<br></div><div><br></div><div>because of some reason the pool is not getting balanced between the primary and failover </div><div><br></div><div><br></div><div>Also I have a problem in tracking my thread previously from <b><a href="http://isc-dhcp-users" rel="noreferrer" target="_blank">http://isc-dhcp-users</a></b> link I used to track and reply but now it is not working, and tried searching the other links I found this <b><a href="https://lists.isc.org/pipermail/dhcp-users/" rel="noreferrer" target="_blank">https://lists.isc.org/pipermail/dhcp-users/</a> </b>to track but I cannot see a reply option in that web page</div><div><br></div><div> </div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Aug 17, 2021 at 5:41 PM Kraishak Mahtha <<a href="mailto:kraishak.edu@gmail.com" rel="noreferrer" target="_blank">kraishak.edu@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Hi,<div>I am using ISC DHCP in primary and failover mode and I am getting issue that clients are not getting leases and when I checked for the service logs I see as<br>Primary Logs:<div>==========<br>Aug 17 17:15:48 dhcp1 dhcpd[12130]: balancing pool f6f5f0 <a href="http://192.168.56.0/24" rel="noreferrer" target="_blank">192.168.56.0/24</a> total 50 free 0 backup 0 lts 0 max-own (+/-)0<br>Aug 17 17:15:48 dhcp1 dhcpd[12130]: balanced pool f6f5f0 <a href="http://192.168.56.0/24" rel="noreferrer" target="_blank">192.168.56.0/24</a> total 50 free 0 backup 0 lts 0 max-misbal 0<br>Aug 17 17:15:48 dhcp1 dhcpd[12130]: peer peer-host: Got POOLREQ, answering negatively! Peer may be out of leases or database inconsistent.<br></div><div><br></div><div>Failover Logs<br>==========</div><div>Aug 17 17:14:48 dhcp2 dhcpd[1902]: balancing pool bf05b0 <a href="http://192.168.56.0/24" rel="noreferrer" target="_blank">192.168.56.0/24</a> total 50 free 50 backup 0 lts -25 max-own (+/-)5 (requesting peer rebalance!)<br>Aug 17 17:14:48 dhcp2 dhcpd[1902]: balanced pool bf05b0 <a href="http://192.168.56.0/24" rel="noreferrer" target="_blank">192.168.56.0/24</a> total 50 free 50 backup 0 lts -25 max-misbal 8<br> pool response: 0 leases<br></div><div><br></div><div>I tried searching the forums and many of them suggested that there might be inconsistency between the configuration file and leases database, I cross verified the configs they are good and regarding the leases file can we manually do any operation to make them in sync ?</div><div><br></div><div>I tried checking the status of the primary and failover in the lease file but they are in normal-normal,</div>cat dhcpd.leases | egrep "my state|partner state" | tail -2<br> my state normal at 2 2021/08/17 16:41:09;<br> partner state normal at 2 2021/08/17 17:01:17;<br><div><br></div><div>Has anyone faced a similar issue/Any suggestions of how to fix the issue, </div><div>Can we manually send requests for the DHCP service to do the pool balance and sync the leases for that specific subnet ?</div><div><br></div><div><br></div><div>Any help/suggestion would be much appreciated<br>Thanks<br></div><div>Kraishak</div><div><br></div><div><br></div></div></div>
</blockquote></div>
</blockquote></div></div></div>
_______________________________________________<br>
ISC funds the development of this software with paid support subscriptions. Contact us at <a href="https://www.isc.org/contact/" rel="noreferrer" target="_blank">https://www.isc.org/contact/</a> for more information.<br>
<br>
dhcp-users mailing list<br>
<a href="mailto:dhcp-users@lists.isc.org" target="_blank">dhcp-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/dhcp-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/dhcp-users</a><br>
</blockquote></div>