<div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr">Thanks for the quick reply!</div><div dir="ltr"><br></div><div dir="ltr">I gave that a try, but I'm still sending out lots of NACKs. There aren't any pools in my config and I added 'authoritative' as false (and tried different permutations of both globally under 'Dhcp4' and inside the subnets), but no luck.<div><br></div><div>That did lead me to this though, which might be an issue: <a href="https://gitlab.isc.org/isc-projects/kea/-/issues/1584">https://gitlab.isc.org/isc-projects/kea/-/issues/1584</a></div><div><br></div><div>I installed the stock Ubuntu Focal 1.6.2 to see if that would make a diff but I see those same NACKs, even with authoritative set to false.</div><div><br></div><div>I did however try 1.8.2 with the patch in <a href="https://gitlab.isc.org/isc-projects/kea/-/issues/1584">https://gitlab.isc.org/isc-projects/kea/-/issues/1584</a> and that prevents the NAKs from getting sent. </div><div><br></div><div>Thanks for pointing me in the right direction :)</div></div></div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Jun 7, 2021 at 3:53 PM Gibbins, John (IM&T, Black Mountain) <John.Gibbins@csiro.au> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex">
<div lang="EN-AU" style="word-wrap:break-word">
<div class="gmail-m_3081353280165895929WordSection1">
<p class="MsoNormal"><span>My (limited) understanding is that it should not send a NAK unless you have told the server that it is authoritative. See
<a href="https://kea.readthedocs.io/en/kea-1.6.2/arm/dhcp4-srv.html#authoritative-dhcpv4-server-behavior" target="_blank">
https://kea.readthedocs.io/en/kea-1.6.2/arm/dhcp4-srv.html#authoritative-dhcpv4-server-behavior</a>.<u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span>If I’m reading this correctly you would need to remove any authoritative directive or replace it with a value of false. As long as you don’t have any pools, it should then only respond to machines
with known MACs.<u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<div style="border-style:solid none none;border-top-width:1pt;border-top-color:rgb(225,225,225);padding:3pt 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> Kea-users <<a href="mailto:kea-users-bounces@lists.isc.org" target="_blank">kea-users-bounces@lists.isc.org</a>>
<b>On Behalf Of </b>Mark Moseley<br>
<b>Sent:</b> Tuesday, 8 June 2021 8:41 AM<br>
<b>To:</b> <a href="mailto:kea-users@lists.isc.org" target="_blank">kea-users@lists.isc.org</a><br>
<b>Subject:</b> [Kea-users] Ignore non-reserved hosts<u></u><u></u></span></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">I've been scouring the manual and google for this but have finally reached the point of giving up and bugging the list :)<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">I'm trying to migrate our DHCP from dhcpd to Kea. I've got an existing DHCP server that it will need to live alongside Kea for a little bit. Server is Ubuntu Focal, with Kea 1.8.2, with mysql host reservation backend.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">I've been trying to figure out how to tell Kea to ignore any hosts that don't appear in the host reservation. I.e. I want Kea to only respond to DHCP requests from MAC addresses that I have configured in the Kea MySQL 'hosts' table.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Currently, Kea is churning out a steady stream of DHCP NAK's to the non-reserved hosts (which are 'reserved' on the legacy dhcpd server but will eventually be migrated to Kea), when those hosts renew their lease. I'd like Kea to silently
drop the unrecognized DHCP requests.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">I think this would be the equivalent of dhcpd's "<span style="font-family:"Courier New";color:black">deny unknown-clients</span>". keama didn't know what to do with that directive (it created a 'statement' clause that kea-dhcpd4 did not
recognize). <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Is it doable/possible to configure Kea to ignore any hosts that don't appear in the host reservations?<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Thanks!<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
</div>
</div>
</div>
</blockquote></div>