<div dir="ltr"><br><div>We're using kkpxe with ours, based on what's detailed here:<br><br><a href="http://forum.ipxe.org/showthread.php?tid=6989">http://forum.ipxe.org/showthread.php?tid=6989</a><br><br>Like I said, between preseed and iPXE, Kea was seeing a different MAC in the request (changes in padding, 01: prefixed, etc.) which confused the heck out of it; this was what I found to work reliably with these clients simultaneously.</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Jan 5, 2017 at 12:46 PM, Ledochowski, Roy <span dir="ltr"><<a href="mailto:roy.ledochowski@hpe.com" target="_blank">roy.ledochowski@hpe.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple">
<div class="m_-3321603779939151624WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Hi Klaus<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">First, thank you for the reply.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">I should have mentioned that my test VM is loading undionly.kpxe. The iPXE developer’s list confirmed that the root problem is that Kea is using the client’s
unicast MAC address in the DHCP offer instead of the broadcast address; iPXE rejects it.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Which exact file are you using for iPXE? I can test it as well.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Thanks again<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">roy<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<div>
<div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Klaus Steden [mailto:<a href="mailto:klausfiend@gmail.com" target="_blank">klausfiend@gmail.com</a>]
<br>
<b>Sent:</b> Thursday, January 05, 2017 11:33 AM<br>
<b>To:</b> Ledochowski, Roy <<a href="mailto:roy.ledochowski@hpe.com" target="_blank">roy.ledochowski@hpe.com</a>>; <a href="mailto:kea-users@lists.isc.org" target="_blank">kea-users@lists.isc.org</a><br>
<b>Subject:</b> Re: [Kea-users] Help! Kea 1.1 sends unicast, breaks iPXE<u></u><u></u></span></p>
</div>
</div><div><div class="h5">
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">We're using Kea and iPXE to do cross-site provisioning so I'm not sure what's not working for you. One thing I did run into early in testing was having to use the kpxe shim (I think that's the suffix, it's one of the binary variants generated
by the makefile and not the default one) because the DHCP request packet from iPXE and preseed were subtly different enough that Kea would create two leases ... but once we got that, it's been solid to the tune of several hundred devices ...<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">I can share parts of my config if you're interested; I did end up using a beta version in our application because it had additional option parsing logic operators, but those have been merged into the released version in the meantime. <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">cheers,<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt">Klaus<u></u><u></u></p>
<div>
<p class="MsoNormal">Sent from my tri-corder<u></u><u></u></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
<br>
<u></u><u></u></p>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt">On Thu, Jan 5, 2017 at 9:19 AM -0800, "Ledochowski, Roy" <<a href="mailto:roy.ledochowski@hpe.com" target="_blank">roy.ledochowski@hpe.com</a>> wrote:<u></u><u></u></p>
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<pre>HI all-<u></u><u></u></pre>
<pre><u></u> <u></u></pre>
<pre>I am looking into replacing ISC DHCPd with Kea in our dev lab. One of the primary requirements is iPXE chainloading - in other words, the PXE ROM on the NIC must be able to download and execute iPXE over the network.<u></u><u></u></pre>
<pre><u></u> <u></u></pre>
<pre>From packet dumps, it appears that Kea is using the unicast MAC address in the destination in DHCP offers. This works for the NIC's PXE ROM, and loads iPXE but iPXE rejects the offers because it expects the broadcast MAC address. As a result iPXE never gets an IP address and fails to execute.<u></u><u></u></pre>
<pre><u></u> <u></u></pre>
<pre>I've setup a simple test environment in VMware Workstation 12.5:<u></u><u></u></pre>
<pre><u></u> <u></u></pre>
<pre>| ---------------- |<u></u><u></u></pre>
<pre>| Kea 1.1 VM | ens37<u></u><u></u></pre>
<pre>| CentOS 7 |----------------------| Test VM <u></u><u></u></pre>
<pre>| ---------------- |<u></u><u></u></pre>
<pre> | ens33<u></u><u></u></pre>
<pre> | <u></u><u></u></pre>
<pre> |<u></u><u></u></pre>
<pre> outside<u></u><u></u></pre>
<pre><u></u> <u></u></pre>
<pre>The interface configuration is <u></u><u></u></pre>
<pre>"interfaces-config": {<u></u><u></u></pre>
<pre> "interfaces": [ "ens37" ]<u></u><u></u></pre>
<pre>}<u></u><u></u></pre>
<pre><u></u> <u></u></pre>
<pre>I have the packet captures if anyone is interested.<u></u><u></u></pre>
<pre><u></u> <u></u></pre>
<pre>Any help is much appreciated and thanks ahead of time,<u></u><u></u></pre>
<pre>roy<u></u><u></u></pre>
<pre>______________________________<wbr>_________________<u></u><u></u></pre>
<pre>Kea-users mailing list<u></u><u></u></pre>
<pre><a href="mailto:Kea-users@lists.isc.org" target="_blank">Kea-users@lists.isc.org</a><u></u><u></u></pre>
<pre><a href="https://lists.isc.org/mailman/listinfo/kea-users" target="_blank">https://lists.isc.org/mailman/<wbr>listinfo/kea-users</a><u></u><u></u></pre>
</div>
</blockquote>
</div>
</div></div></div>
</div>
</blockquote></div><br></div>