<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:"Consolas",serif;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Hi Klaus<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">First, thank you for the reply.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">I should have mentioned that my test VM is loading undionly.kpxe. The iPXE developer’s list confirmed that the root problem is that Kea is using the client’s
unicast MAC address in the DHCP offer instead of the broadcast address; iPXE rejects it.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Which exact file are you using for iPXE? I can test it as well.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Thanks again<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">roy<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Klaus Steden [mailto:klausfiend@gmail.com]
<br>
<b>Sent:</b> Thursday, January 05, 2017 11:33 AM<br>
<b>To:</b> Ledochowski, Roy <roy.ledochowski@hpe.com>; kea-users@lists.isc.org<br>
<b>Subject:</b> Re: [Kea-users] Help! Kea 1.1 sends unicast, breaks iPXE<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">We're using Kea and iPXE to do cross-site provisioning so I'm not sure what's not working for you. One thing I did run into early in testing was having to use the kpxe shim (I think that's the suffix, it's one of the binary variants generated
by the makefile and not the default one) because the DHCP request packet from iPXE and preseed were subtly different enough that Kea would create two leases ... but once we got that, it's been solid to the tune of several hundred devices ...<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I can share parts of my config if you're interested; I did end up using a beta version in our application because it had additional option parsing logic operators, but those have been merged into the released version in the meantime. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">cheers,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt">Klaus<o:p></o:p></p>
<div>
<p class="MsoNormal">Sent from my tri-corder<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
<br>
<o:p></o:p></p>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt">On Thu, Jan 5, 2017 at 9:19 AM -0800, "Ledochowski, Roy" <<a href="mailto:roy.ledochowski@hpe.com" target="_blank">roy.ledochowski@hpe.com</a>> wrote:<o:p></o:p></p>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<pre>HI all-<o:p></o:p></pre>
<pre><o:p> </o:p></pre>
<pre>I am looking into replacing ISC DHCPd with Kea in our dev lab. One of the primary requirements is iPXE chainloading - in other words, the PXE ROM on the NIC must be able to download and execute iPXE over the network.<o:p></o:p></pre>
<pre><o:p> </o:p></pre>
<pre>From packet dumps, it appears that Kea is using the unicast MAC address in the destination in DHCP offers. This works for the NIC's PXE ROM, and loads iPXE but iPXE rejects the offers because it expects the broadcast MAC address. As a result iPXE never gets an IP address and fails to execute.<o:p></o:p></pre>
<pre><o:p> </o:p></pre>
<pre>I've setup a simple test environment in VMware Workstation 12.5:<o:p></o:p></pre>
<pre><o:p> </o:p></pre>
<pre>| ---------------- |<o:p></o:p></pre>
<pre>| Kea 1.1 VM | ens37<o:p></o:p></pre>
<pre>| CentOS 7 |----------------------| Test VM <o:p></o:p></pre>
<pre>| ---------------- |<o:p></o:p></pre>
<pre> | ens33<o:p></o:p></pre>
<pre> | <o:p></o:p></pre>
<pre> |<o:p></o:p></pre>
<pre> outside<o:p></o:p></pre>
<pre><o:p> </o:p></pre>
<pre>The interface configuration is <o:p></o:p></pre>
<pre>"interfaces-config": {<o:p></o:p></pre>
<pre> "interfaces": [ "ens37" ]<o:p></o:p></pre>
<pre>}<o:p></o:p></pre>
<pre><o:p> </o:p></pre>
<pre>I have the packet captures if anyone is interested.<o:p></o:p></pre>
<pre><o:p> </o:p></pre>
<pre>Any help is much appreciated and thanks ahead of time,<o:p></o:p></pre>
<pre>roy<o:p></o:p></pre>
<pre>_______________________________________________<o:p></o:p></pre>
<pre>Kea-users mailing list<o:p></o:p></pre>
<pre><a href="mailto:Kea-users@lists.isc.org">Kea-users@lists.isc.org</a><o:p></o:p></pre>
<pre><a href="https://lists.isc.org/mailman/listinfo/kea-users">https://lists.isc.org/mailman/listinfo/kea-users</a><o:p></o:p></pre>
</div>
</blockquote>
</div>
</div>
</body>
</html>