<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.E-mailStlus17
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=HU link=blue vlink="#954F72"><div class=WordSection1><p class=MsoNormal><span style='color:#1F497D;mso-fareast-language:EN-US'>Have you tried setting the IPs also for the interfaces (both in interface-configs and pools), like this one<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span lang=DE>"interfaces": [ "eth0/192.168.20.1", "eth0.30192.168.30.1"]<o:p></o:p></span></p><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><p class=MsoNormal><span lang=DE>…<o:p></o:p></span></p><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><p class=MsoNormal><span lang=DE>"interface": "eth0/192.168.20.1",<o:p></o:p></span></p><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><p class=MsoNormal><span lang=DE>The dirty workaround for native vlan 1 is to have a cross-cable connected between two ports of the same switch. One port is set to native untagged vlan, the other port is set to vlan 20 (new vlan, access port, so untagged also). Don’t forget to remove the native vlan from the KEA’s port in this case, otherwise you’ll create a loop.<o:p></o:p></span></p><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><p class=MsoNormal><span lang=DE>Cheers,<o:p></o:p></span></p><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><p class=MsoNormal><span lang=DE> Tom</span><span style='color:#1F497D;mso-fareast-language:EN-US'><o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b>From:</b> Talkabout [mailto:talk.about@gmx.de] <br><b>Sent:</b> Saturday, February 1, 2020 5:58 PM<br><b>To:</b> Dajka Tamás <viper@vipernet.hu>; kea-users@lists.isc.org<br><b>Subject:</b> AW: [Kea-users] KEA DHCP and VLANS...<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span lang=DE>Hi Tom,<o:p></o:p></span></p><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><p class=MsoNormal><span lang=DE>thanks for your answer but both suggestions are difficult to accomplish. The first one is disqualified because other components in my Network infrastructure do not support vlan Tagging, the second one because my switch does not provide a dhcp relay Option.<o:p></o:p></span></p><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><p class=MsoNormal><span lang=DE>I am wondering why KEA DHCP is not supporting such a configuration. Currently I am using dnsmasq and there I have no issues. Theoretically only a check is missing whether a particular packet is tagged, if so, do not consider the physical device for dhcp…<o:p></o:p></span></p><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><p class=MsoNormal><span lang=DE>Can I assume that such an infrastructure will never be supported by KEA DHCP Server? If so this is really bad luck, I like the functionalities of this Software…<o:p></o:p></span></p><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><span lang=DE>Thanks!<o:p></o:p></span></p><p class=MsoNormal><span lang=DE>Bye<o:p></o:p></span></p><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><p class=MsoNormal><span lang=DE>Gesendet von <a href="https://go.microsoft.com/fwlink/?LinkId=550986">Mail</a> für Windows 10<o:p></o:p></span></p><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=DE>Von: </span></b><span lang=DE><a href="mailto:viper@vipernet.hu">Dajka Tamás</a><br><b>Gesendet: </b>Samstag, 1. Februar 2020 17:43<br><b>An: </b><a href="mailto:talk.about@gmx.de">'Talkabout'</a>; <a href="mailto:kea-users@lists.isc.org">kea-users@lists.isc.org</a><br><b>Betreff: </b>RE: [Kea-users] KEA DHCP and VLANS...<o:p></o:p></span></p></div><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D;mso-fareast-language:EN-US'>Hi,<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D;mso-fareast-language:EN-US'>it’s never a good idea to mix untagged (native vlan 1) and tagged packets. I suggest you change your network layout, this will prevent you from many more phenomenons.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D;mso-fareast-language:EN-US'>Cheers,<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D;mso-fareast-language:EN-US'> Tom<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D;mso-fareast-language:EN-US'>p.s.: if you cannot do it easily, than set up a dhcp-relay for native vlan on the switch and relay it to the KEA in a separate vlan<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b>From:</b> Kea-users [<a href="mailto:kea-users-bounces@lists.isc.org">mailto:kea-users-bounces@lists.isc.org</a>] <b>On Behalf Of </b>Talkabout<br><b>Sent:</b> Saturday, February 1, 2020 2:12 PM<br><b>To:</b> <a href="mailto:kea-users@lists.isc.org">kea-users@lists.isc.org</a><br><b>Subject:</b> Re: [Kea-users] KEA DHCP and VLANS...<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span lang=DE>Hi all,<o:p></o:p></span></p><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><p class=MsoNormal><span lang=DE>I think the Problem here is the physical interface. It seems that for every virtual interface the dhcp request is also delivered to eth0, which makes the DHCP Server to try to advertise ips from the vlan and lan. Depending on the Client the correct or wrong ip is accepted.<o:p></o:p></span></p><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><p class=MsoNormal><span lang=DE>Question: is KEA DHCP Server honoring the vlan Tagging? In such a case it should not accept the DHCP requests on eth0 if the request is tagged with a particuar vlan.<o:p></o:p></span></p><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><p class=MsoNormal><span lang=DE>Thanks!<o:p></o:p></span></p><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><p class=MsoNormal><span lang=DE>Gesendet von <a href="https://go.microsoft.com/fwlink/?LinkId=550986">Mail</a> für Windows 10<o:p></o:p></span></p><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=DE>Von: </span></b><span lang=DE><a href="mailto:talk.about@gmx.de">Talkabout</a><br><b>Gesendet: </b>Samstag, 1. Februar 2020 12:36<br><b>An: </b><a href="mailto:kea-users@lists.isc.org">kea-users@lists.isc.org</a><br><b>Betreff: </b>[Kea-users] KEA DHCP and VLANS...<o:p></o:p></span></p></div><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><p class=MsoNormal><span lang=DE>Hi guys,<o:p></o:p></span></p><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><p class=MsoNormal><span lang=DE>I am struggling in getting my KEA DHCP Server to work with my VLAN Environment. I was assuming that defining a list of virtual interfaces and subnets matching those is sufficient, but it seems that the „dhcp-socket-type: raw“ is skipping the VLAN handling in the Linux kernel and thus this Information is Kind of lost… I have read a lot About Client classes, shared Networks and so on but I have not found any solution in how to get the DHCP Server to assign correct ip pools based on the VLAN. Here is my configuration:<o:p></o:p></span></p><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><p class=MsoNormal><span lang=DE>Interfaces:<o:p></o:p></span></p><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><p class=MsoNormal><span lang=DE>eth0 => physical interface<o:p></o:p></span></p><p class=MsoNormal><span lang=DE>eth0.30 => virtual interface<o:p></o:p></span></p><p class=MsoNormal><span lang=DE>eth0.50 => virtual interface<o:p></o:p></span></p><p class=MsoNormal><span lang=DE>eth0.100 => virtual interface<o:p></o:p></span></p><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><p class=MsoNormal><span lang=DE>KEA DHCP conf:<o:p></o:p></span></p><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><p class=MsoNormal><span lang=DE>{<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "Dhcp4": {<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "interfaces-config": {<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "interfaces": [ "eth0", "eth0.30", "eth0.50", "eth0.100" ],<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "dhcp-socket-type": "raw"<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> },<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "control-socket": {<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "socket-type": "unix",<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "socket-name": "/tmp/kea4-ctrl-socket"<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> },<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "lease-database": {<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> …<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> },<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "hosts-database": {<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> …<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> },<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "sanity-checks": {<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "lease-checks": "fix-del"<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> },<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "valid-lifetime": 28800,<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "rebind-timer": 21600,<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "subnet4": [<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> {<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "pools": [<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> {<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "pool": "192.168.20.100-192.168.20.200"<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> }<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> ],<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "id": 1,<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "subnet": "192.168.20.0/24",<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "interface": "eth0",<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "option-data": [<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> …<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> ]<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> },<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> {<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "pools": [<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> {<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "pool": "192.168.30.100-192.168.30.200"<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> }<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> ],<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "id": 30,<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "subnet": "192.168.30.0/24",<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "interface": "eth0.30",<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "option-data": [<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> …<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> ]<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> },<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> {<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "pools": [<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> {<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "pool": "192.168.50.100-192.168.50.200"<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> }<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> ],<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "id": 50,<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "interface" : "eth0.50",<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "subnet": "192.168.50.0/24",<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "option-data": [<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> …<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> ]<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> },<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> {<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "pools": [<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> {<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "pool": "192.168.100.100-192.168.100.200"<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> }<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> ],<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "id": 100,<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "subnet": "192.168.100.0/24",<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "interface": "eth0.100",<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "option-data": [<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> …<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> ]<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> }<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> ],<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "hooks-libraries": [<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> …<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> ],<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> "loggers": [<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> …<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> ]<o:p></o:p></span></p><p class=MsoNormal><span lang=DE> }<o:p></o:p></span></p><p class=MsoNormal><span lang=DE>}<o:p></o:p></span></p><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><p class=MsoNormal><span lang=DE>What do I Need to do to force the DHCP Server to assign an IP address from a subnet based on the tagged VLAN of the request?<o:p></o:p></span></p><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><p class=MsoNormal><span lang=DE>I am using KEA DHCP Server Version 1.6.1.<o:p></o:p></span></p><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><p class=MsoNormal><span lang=DE>Help is much appreciated!<o:p></o:p></span></p><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><p class=MsoNormal><span lang=DE>Thanks!<o:p></o:p></span></p><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><p class=MsoNormal><span lang=DE>Gesendet von <a href="https://go.microsoft.com/fwlink/?LinkId=550986">Mail</a> für Windows 10<o:p></o:p></span></p><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p></div></body></html>