<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-AU" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">My (limited) understanding is that it should not send a NAK unless you have told the server that it is authoritative. See
<a href="https://kea.readthedocs.io/en/kea-1.6.2/arm/dhcp4-srv.html#authoritative-dhcpv4-server-behavior">
https://kea.readthedocs.io/en/kea-1.6.2/arm/dhcp4-srv.html#authoritative-dhcpv4-server-behavior</a>.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">If I’m reading this correctly you would need to remove any authoritative directive or replace it with a value of false. As long as you don’t have any pools, it should then only respond to machines
with known MACs.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> Kea-users <kea-users-bounces@lists.isc.org>
<b>On Behalf Of </b>Mark Moseley<br>
<b>Sent:</b> Tuesday, 8 June 2021 8:41 AM<br>
<b>To:</b> kea-users@lists.isc.org<br>
<b>Subject:</b> [Kea-users] Ignore non-reserved hosts<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">I've been scouring the manual and google for this but have finally reached the point of giving up and bugging the list :)<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I'm trying to migrate our DHCP from dhcpd to Kea. I've got an existing DHCP server that it will need to live alongside Kea for a little bit. Server is Ubuntu Focal, with Kea 1.8.2, with mysql host reservation backend.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I've been trying to figure out how to tell Kea to ignore any hosts that don't appear in the host reservation. I.e. I want Kea to only respond to DHCP requests from MAC addresses that I have configured in the Kea MySQL 'hosts' table.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Currently, Kea is churning out a steady stream of DHCP NAK's to the non-reserved hosts (which are 'reserved' on the legacy dhcpd server but will eventually be migrated to Kea), when those hosts renew their lease. I'd like Kea to silently
drop the unrecognized DHCP requests.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I think this would be the equivalent of dhcpd's "<span style="font-family:"Courier New";color:black">deny unknown-clients</span>". keama didn't know what to do with that directive (it created a 'statement' clause that kea-dhcpd4 did not
recognize). <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Is it doable/possible to configure Kea to ignore any hosts that don't appear in the host reservations?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Thanks!<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</div>
</body>
</html>