I believe Kea checks if the address belongs to interface... BTW I don't understand your problem: DHCPv4 is served on the link behind the NAT so is not related to any NAT traversal possible issue? Regards Francis Dupont <fdupont at isc.org>