[Kea-users] [EXTERNAL] Kea dhcp6 clients do not get IPs
Xiao, Yu (CCI-Atlanta)
yu.xiao at cox.com
Mon Aug 19 13:56:05 UTC 2024
Hi Jan,
It is interesting that it was working before. I noticed that even I didn’t use kea but configured two IPv6 addresses from the same IPv6 subnet, but they couldn’t ping each other until I added a new VM as the vrouter. The purpose of the vRouter is to advertise the default route via RA messages so those hosts could communicate with each other even if they are in the same subnet.
Here is a good discussion on this from Cisco:
https://community.cisco.com/t5/ipv6/ipv6-clients-can-t-ping-each-other-even-they-are-in-the-same-lan/td-p/5018455
Best Regards,
Yu
From: Jan Jurko <jan at jurko.cz>
Date: Monday, August 19, 2024 at 9:46 AM
To: Xiao, Yu (CCI-Atlanta) <yu.xiao at cox.com>
Cc: Kea user's list <kea-users at lists.isc.org>
Subject: Re: [EXTERNAL] [Kea-users] Kea dhcp6 clients do not get IPs
Hi Yu.
Thank you for the reply.
Kea is a vm on hypervisor, there is one additional vm for testing - it acts like a dhcp client. Rest of the network are physical computers. They are in the same network - no vlans etc. For v4 we can say they all use 192.168.0.0/24, for v6 there is one prefix for all of them as well.
The old ISC dhcp server was the vm on the same hypervisor with the same IP4/6 addresses assigned.
Jan
19. 8. 2024 v 13:30, Xiao, Yu (CCI-Atlanta) <yu.xiao at cox.com>:
Hi Jan,
“As I said, Kea and rest of the computers/clients are in the same network.”, are they on different VMs of the same hypervisor? If so, you may need to have a Virtual Router and then you will need to advertise the network using the vRouter, thus the clients know the routes to the V6 server.
Best Regards,
Yu
From: Kea-users <kea-users-bounces at lists.isc.org<mailto:kea-users-bounces at lists.isc.org>> on behalf of Jan Jurko via Kea-users <kea-users at lists.isc.org<mailto:kea-users at lists.isc.org>>
Date: Sunday, August 18, 2024 at 7:03 AM
To: Kea user's list <kea-users at lists.isc.org<mailto:kea-users at lists.isc.org>>
Cc: Jan Jurko <jan at jurko.cz<mailto:jan at jurko.cz>>
Subject: [EXTERNAL] Re: [Kea-users] Kea dhcp6 clients do not get IPs
Hello Darren.
Thank you for your reply.
Kea and client are both on the same hypervizor, other clients are on the same network in the building so there should not be a problem with some fw etc.
I’ve enabled windows logs for dhcp and here they are:
1.
Information
Solicit is sent from the interface 4. Status code is 0x0
2.
Error
Message is invalid and it is discarded.
3.
Error
Your computer was not assigned an address from the network (by the DHCP server) for the Network Card with network address XXXX. The following error occured: 0x138E. Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.
There is no firewall on the clients.
As I said, Kea and rest of the computers/clients are in the same network.
I’ve tried to create the small configuration - no reservations, only pool of addresses - the same bad result.
Thank you very much for your help.
Jan
> 18. 8. 2024 v 12:36, Darren Ankney <darren.ankney at gmail.com<mailto:darren.ankney at gmail.com>>:
>
> Hi Jan,
>
> From the log messages you have shown, it appears that Kea is
> attempting to advertise some address to a client with DUID:
> 00:01:00:01:2e:52:af:30:52:54:00:f4:c2:d7 The client should next
> request this address but that isn't shown in your logs. The client
> must not like something about the advertisement or is not receiving
> the advertisement. It would be difficult to help without more
> information. Is this traffic relayed or do the client and server
> exist on the same physical network? Have you looked in the client
> logs (if exist) to see what it thinks is happening? You might try
> adding a small pool to the subnet to see what happens (i.e., does the
> client get an address, though I doubt that would be the case).
>
> Thank you,
> Darren Ankney
>
> On Sun, Aug 18, 2024 at 5:03 AM Jan Jurko via Kea-users
> <kea-users at lists.isc.org<mailto:kea-users at lists.isc.org>> wrote:
>>
>> Good day.
>> I have Kea 2.6.1 installed. I use v4 and v6 dhcp server. V4 works fine but v6 does not give clients IPv6 addresses. The setup is:
>>
>> HW router with ipv6 enabled, RA enabled, M flag present. I do not use O flag because in the dualstack dns servers are on v4 addresses. So I just want to distribute ipv6 addresses from dhcp server to clients. I use hw-address to distribute addresses but I tried DUID as well.
>>
>> I can see in the Kea logs this output:
>>
>> 2024-08-18 10:44:32.959 INFO [kea-dhcp6.dhcp6/3542.140690709083840] DHCP6_QUERY_LABEL received query: duid=[00:01:00:01:2e:52:af:30:52:54:00:f4:c2:d7], [no hwaddr info], tid=0xbea948
>> 2024-08-18 10:44:32.959 INFO [kea-dhcp6.packets/3542.140690709083840] DHCP6_PACKET_RECEIVED duid=[00:01:00:01:2e:52:af:30:52:54:00:f4:c2:d7], [no hwaddr info], tid=0xbea948: SOLICIT (type 1) received from fe80::54a0:da31:647a:debc to ff02::1:2 on interface ens3
>> 2024-08-18 10:44:32.959 INFO [kea-dhcp6.packets/3542.140690709083840] DHCP6_PACKET_SEND duid=[00:01:00:01:2e:52:af:30:52:54:00:f4:c2:d7], [no hwaddr info], tid=0xbea948: trying to send packet ADVERTISE (type 2) from [ff02::1:2]:547 to [fe80::54a0:da31:647a:debc]:546 on interface ens3
>> 2024-08-18 10:44:33.957 INFO [kea-dhcp6.dhcp6/3542.140690717476544] DHCP6_QUERY_LABEL received query: duid=[00:01:00:01:2e:52:af:30:52:54:00:f4:c2:d7], [no hwaddr info], tid=0xbea948
>> 2024-08-18 10:44:33.958 INFO [kea-dhcp6.packets/3542.140690717476544] DHCP6_PACKET_RECEIVED duid=[00:01:00:01:2e:52:af:30:52:54:00:f4:c2:d7], [no hwaddr info], tid=0xbea948: SOLICIT (type 1) received from fe80::54a0:da31:647a:debc to ff02::1:2 on interface ens3
>> 2024-08-18 10:44:33.958 INFO [kea-dhcp6.packets/3542.140690717476544] DHCP6_PACKET_SEND duid=[00:01:00:01:2e:52:af:30:52:54:00:f4:c2:d7], [no hwaddr info], tid=0xbea948: trying to send packet ADVERTISE (type 2) from [ff02::1:2]:547 to [fe80::54a0:da31:647a:debc]:546 on interface ens3
>> 2024-08-18 10:44:33.959 INFO [kea-dhcp6.dhcp6/3542.140690709083840] DHCP6_QUERY_LABEL received query: duid=[00:01:00:01:2e:52:af:30:52:54:00:f4:c2:d7], [no hwaddr info], tid=0xbea948
>> 2024-08-18 10:44:33.959 INFO [kea-dhcp6.packets/3542.140690709083840] DHCP6_PACKET_RECEIVED duid=[00:01:00:01:2e:52:af:30:52:54:00:f4:c2:d7], [no hwaddr info], tid=0xbea948: SOLICIT (type 1) received from fe80::54a0:da31:647a:debc to ff02::1:2 on interface ens3
>> 2024-08-18 10:44:33.960 INFO [kea-dhcp6.packets/3542.140690709083840] DHCP6_PACKET_SEND duid=[00:01:00:01:2e:52:af:30:52:54:00:f4:c2:d7], [no hwaddr info], tid=0xbea948: trying to send packet ADVERTISE (type 2) from [ff02::1:2]:547 to [fe80::54a0:da31:647a:de
>>
>>
>> I’ve used the old ISC dhcp server but I want to migrace to Kea because the old ISC dhcp server is obsolette.
>>
>> Configuration file looks like this (it is truncated because there are more than 200 records):
>>
>>
>>
>> {
>> # /etc/dhcpd6.conf
>> #
>> # Sample DHCPv6 configuration file for ISC dhcpd
>> #
>> # *** PLEASE CONFIGURE IT FIRST ***
>> #
>> # Don't forget to set the DHCPD6_INTERFACE in the
>> # /etc/sysconfig/dhcpd file.
>> #
>> /// This configuration declares some subnets but has no interfaces-config
>> /// Reference Kea #245
>> "Dhcp6": {
>> "control-socket": {
>> "socket-type": "unix",
>> "socket-name": "/tmp/kea6-ctrl-socket"
>> },
>> "mac-sources": [
>> "any"
>> ],
>> "loggers": [
>> {
>> "name": "kea-dhcp6",
>> "severity": "DEBUG",
>> "output_options": [
>> {
>> "output": "/var/log/kea/dhcp6.log",
>> "maxver": 10
>> }
>> ]
>> },
>> {
>> "name": "kea-dhcp6.dhcpsrv",
>> "severity": "DEBUG",
>> "output_options": [
>> {
>> "output": "/var/log/kea/dhcp6-dhcpsrv.log",
>> "maxver": 10
>> }
>> ]
>> },
>> {
>> "name": "kea-dhcp6.leases",
>> "severity": "DEBUG",
>> "output_options": [
>> {
>> "output": "/var/log/kea/dhcp6-leases.log",
>> "maxver": 10
>> }
>> ]
>> }
>> ],
>> "interfaces-config": {
>> "interfaces": [ "ens3" ]
>> },
>> "subnet6": [
>> {
>> "id": 1,
>> "subnet": „2001:XXX:XXX:0::/64",
>> "reservations": [
>> {
>> "hostname": „XXX",
>> "hw-address": "08:8f:c3:f5:ab:49",
>> "ip-addresses": [
>> „2001:XXX:XXX:0:192:168:1:75"
>> ]
>> },
>> {
>> "hostname": „AAAAA",
>> "hw-address": "08:97:98:d7:c5:d0",
>> "ip-addresses": [
>> „2001:XXX:XXX:0:192:168:0:169"
>> ]
>> }
>> ]
>> }
>> ]
>> }
>> }
>>
>> Thank you for your help. I’ve spent more than 10 hours debugging this problem, but still no luck.
>>
>> Jan
>> --
>> ISC funds the development of this software with paid support subscriptions. Contact us at https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.isc.org%2Fcontact%2F&data=05%7C02%7Cyu.xiao%40cox.com%7C3420a2fe7e184acca34b08dcbf75682b%7C9feebc97ff0442c9a152767073872118%7C1%7C0%7C638595758191679518%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=9BgkFZi%2F9epTu55hHPopX8nQcHaIqcl01lVukvT4aNA%3D&reserved=0<https://www.isc.org/contact/> for more information.
>>
>> To unsubscribe visit https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.isc.org%2Fmailman%2Flistinfo%2Fkea-users&data=05%7C02%7Cyu.xiao%40cox.com%7C3420a2fe7e184acca34b08dcbf75682b%7C9feebc97ff0442c9a152767073872118%7C1%7C0%7C638595758191688069%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=BnvgjgtPpH%2FSU287tdk18aJZkJo2l%2BNi%2FetZ1ntuTk8%3D&reserved=0<https://lists.isc.org/mailman/listinfo/kea-users>.
>>
>> Kea-users mailing list
>> Kea-users at lists.isc.org<mailto:Kea-users at lists.isc.org>
>> https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.isc.org%2Fmailman%2Flistinfo%2Fkea-users&data=05%7C02%7Cyu.xiao%40cox.com%7C3420a2fe7e184acca34b08dcbf75682b%7C9feebc97ff0442c9a152767073872118%7C1%7C0%7C638595758191694420%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=77MgdZymIhCmkeqPQC3A6%2BBzNwz2G8dbiYwoge77tP0%3D&reserved=0<https://lists.isc.org/mailman/listinfo/kea-users>
> --
> ISC funds the development of this software with paid support subscriptions. Contact us at https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.isc.org%2Fcontact%2F&data=05%7C02%7Cyu.xiao%40cox.com%7C3420a2fe7e184acca34b08dcbf75682b%7C9feebc97ff0442c9a152767073872118%7C1%7C0%7C638595758191699255%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=u6PS82Lo5AG%2B2WNo%2FPWsyGZkE151sVgp4iql9avwxe0%3D&reserved=0<https://www.isc.org/contact/> for more information.
>
> To unsubscribe visit https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.isc.org%2Fmailman%2Flistinfo%2Fkea-users&data=05%7C02%7Cyu.xiao%40cox.com%7C3420a2fe7e184acca34b08dcbf75682b%7C9feebc97ff0442c9a152767073872118%7C1%7C0%7C638595758191703628%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=gZS5oyt5wWVHU5YTLa7egtCrQcrgfCIjeSDjgMThZ8A%3D&reserved=0<https://lists.isc.org/mailman/listinfo/kea-users>.
>
> Kea-users mailing list
> Kea-users at lists.isc.org<mailto:Kea-users at lists.isc.org>
> https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.isc.org%2Fmailman%2Flistinfo%2Fkea-users&data=05%7C02%7Cyu.xiao%40cox.com%7C3420a2fe7e184acca34b08dcbf75682b%7C9feebc97ff0442c9a152767073872118%7C1%7C0%7C638595758191707868%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=cRnEDRyqvwhBUCQMwzIuiqinQmfau77ecoBIrd4Y%2BXA%3D&reserved=0<https://lists.isc.org/mailman/listinfo/kea-users>
--
ISC funds the development of this software with paid support subscriptions. Contact us at https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.isc.org%2Fcontact%2F&data=05%7C02%7Cyu.xiao%40cox.com%7C3420a2fe7e184acca34b08dcbf75682b%7C9feebc97ff0442c9a152767073872118%7C1%7C0%7C638595758191712252%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=6Yjwija9kqQOFn1sJuBejWctzBASnaggs6dRMB8Eu9I%3D&reserved=0<https://www.isc.org/contact/> for more information.
To unsubscribe visit https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.isc.org%2Fmailman%2Flistinfo%2Fkea-users&data=05%7C02%7Cyu.xiao%40cox.com%7C3420a2fe7e184acca34b08dcbf75682b%7C9feebc97ff0442c9a152767073872118%7C1%7C0%7C638595758191716481%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=a22l6OSff5zH%2Ba9dYdpcNWantnq9wOmigopa2LLyRiA%3D&reserved=0<https://lists.isc.org/mailman/listinfo/kea-users>.
Kea-users mailing list
Kea-users at lists.isc.org<mailto:Kea-users at lists.isc.org>
https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.isc.org%2Fmailman%2Flistinfo%2Fkea-users&data=05%7C02%7Cyu.xiao%40cox.com%7C3420a2fe7e184acca34b08dcbf75682b%7C9feebc97ff0442c9a152767073872118%7C1%7C0%7C638595758191720665%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=%2FEFwvIACEswtGr9NgkWQfkO7dtNyhm%2Fk6Swyno%2F2qfE%3D&reserved=0<https://lists.isc.org/mailman/listinfo/kea-users>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/kea-users/attachments/20240819/3133d9f4/attachment-0001.htm>
More information about the Kea-users
mailing list