<div dir="ltr">Thanks for the response.<div><br></div><div>It's not that I don't want to use DHCP Relay, I'm just a bit baffled that the interfaces I've configured have port 67 open on them and are on the utagged and vlan network interfaces on the server and listening where all of the devices are on, but as soon as I turn off DHCP Relay on the pfSense box, I don't see any DHCP traffic in the log file I've configured, which is splitting out the packet information into its own log file. I would expect to see log info that the traffic is being received and DHCP requests are being processed on the interfaces.</div><div><br></div><div>So I would post a log file, but there wouldn't be anything to show since there isn't anything there.</div><div><br></div><div>With my Unifi equipment, I'm running the latest version of the Unifi controller, and I've gone through the Multicast tab, and for whatever reason, most of those options were checked to filter multicast traffic. I'm *think* that might have been clobbering the DHCP request traffic, which is why the DHCP Relay was the only way things were working since any DHCP request was then re-targeted to the IP address I specified, which is what I'm seeing in the logs.</div><div><br></div><div>Like I said previously, I've got things pretty wide open in pfSense between the vlans. All devices can talk to each other. I would love to eventually block traffic between these vlans, but with a problem like this, that would make troubleshooting things a bit harder.</div><div><br></div><div>So it would seem there are a few disparate things [pfSense, Unifi Controller, Kea] at play that might be getting in the way.</div><div><br></div><div>Any suggestions on where to look to see why things aren't behaving like I'm expecting?</div><div><br></div><div>-Ubence</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Jul 15, 2024 at 12:15 AM DDFR | Ronald Blaas <<a href="mailto:ronald.blaas@ddfr.nl">ronald.blaas@ddfr.nl</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div class="msg-7442440321550224328">
<div dir="ltr">
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
Not really sure how you have your network setup. </div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
But in my belief, if you want dhcp to work without RELAY you have to make sure your DHCP server is directly connected to all the LANs. So your DHCP server will need to have multiple Nics. </div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
Is there a particular reason you do not want to have a dhcp relay? </div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
I have a kinda similar setup and am using DHCP relay. It is operating as expected and without problems.</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
It is also wise to share the output of your log file with the error you are receiving. </div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
Tis helps in pinpointing the problem.</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
Regards</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
<br>
</div>
<div id="m_630426534391717801Signature" style="color:inherit">
<p style="text-align:left;line-height:normal;background-color:rgb(255,255,255);margin:0px;min-height:13px;font-family:Helvetica;font-size:11px">
<br>
</p>
<p style="text-align:left;line-height:normal;background-color:rgb(255,255,255);margin:0px;font-family:Helvetica;font-size:11px">
<span style="font-family:Calibri,Helvetica,sans-serif;font-size:11pt">Ronald </span></p>
<p style="line-height:normal;margin:0px;min-height:12px;font-family:"Times New Roman";font-size:11px">
<br>
</p>
<div style="line-height:normal;margin:0px;min-height:12px;font-family:"Times New Roman";font-size:11px;color:rgb(0,0,0)">
<br>
</div>
</div>
<div id="m_630426534391717801appendonsend"></div>
<hr style="display:inline-block;width:98%">
<div id="m_630426534391717801divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Kea-users <<a href="mailto:kea-users-bounces@lists.isc.org" target="_blank">kea-users-bounces@lists.isc.org</a>> on behalf of Ubence Quevedo <<a href="mailto:thatrat@gmail.com" target="_blank">thatrat@gmail.com</a>><br>
<b>Sent:</b> Monday, July 15, 2024 00:26<br>
<b>To:</b> <a href="mailto:kea-users@lists.isc.org" target="_blank">kea-users@lists.isc.org</a> <<a href="mailto:kea-users@lists.isc.org" target="_blank">kea-users@lists.isc.org</a>><br>
<b>Subject:</b> [Kea-users] Need to have DHCP Relay in order for Kea to work...?</font>
<div> </div>
</div>
<div>
<table border="0" cellspacing="0" cellpadding="0" width="100%" align="left" style="border:0px;display:table;width:100%;table-layout:fixed;float:none">
<tbody style="display:block">
<tr>
<td valign="middle" width="1px" bgcolor="#A6A6A6" cellpadding="7px 2px 7px 2px" style="padding:7px 2px;background-color:rgb(166,166,166)">
</td>
<td valign="middle" width="100%" bgcolor="#EAEAEA" cellpadding="7px 5px 7px 15px" color="#212121" style="width:100%;background-color:rgb(234,234,234);padding:7px 5px 7px 15px;font-family:wf_segoe-ui_normal,"Segoe UI","Segoe WP",Tahoma,Arial,sans-serif;font-size:12px;font-weight:normal;color:rgb(33,33,33);text-align:left">
<div>U ontvangt niet vaak e-mail van <a href="mailto:thatrat@gmail.com" target="_blank">thatrat@gmail.com</a>. <a href="https://aka.ms/LearnAboutSenderIdentification" target="_blank">
Meer informatie over waarom dit belangrijk is</a></div>
</td>
<td valign="middle" align="left" width="75px" bgcolor="#EAEAEA" cellpadding="7px 5px 7px 5px" color="#212121" style="width:75px;background-color:rgb(234,234,234);padding:7px 5px;font-family:wf_segoe-ui_normal,"Segoe UI","Segoe WP",Tahoma,Arial,sans-serif;font-size:12px;font-weight:normal;color:rgb(33,33,33);text-align:left">
</td>
</tr>
</tbody>
</table>
<div>
<div dir="ltr">
<p style="margin:0in;font-size:12pt;font-family:Aptos,sans-serif">
Hi Everyone,</p>
<p style="margin:0in;font-size:12pt;font-family:Aptos,sans-serif">
</p>
<p style="margin:0in;font-size:12pt;font-family:Aptos,sans-serif">
I’ve been using Kea for just under a year for a home setup on a Linux Ubuntu server. I switched from isc dhcp since it was end of life. My setup has a lot of MAC address reservations with some general pools for systems that don’t have IP reservations.</p>
<p style="margin:0in;font-size:12pt;font-family:Aptos,sans-serif">
</p>
<p style="margin:0in;font-size:12pt;font-family:Aptos,sans-serif">
I also have a few vlans set up with the reservations for devices on each of the vlans. I’m using pfSense as my gateway with some Unifi equipment that is vlan aware.</p>
<p style="margin:0in;font-size:12pt;font-family:Aptos,sans-serif">
</p>
<p style="margin:0in;font-size:12pt;font-family:Aptos,sans-serif">
I’m running into an issue and I’m not sure why and would love some advice on how to look into this.</p>
<p style="margin:0in;font-size:12pt;font-family:Aptos,sans-serif">
</p>
<p style="margin:0in;font-size:12pt;font-family:Aptos,sans-serif">
I have the interfaces on the system setup that is running Kea, to advertise on the untagged network [mostly some servers], vlan 11 [user systems], and vlan12 [IoT devices].</p>
<p style="margin:0in;font-size:12pt;font-family:Aptos,sans-serif">
</p>
<p style="margin:0in;font-size:12pt;font-family:Aptos,sans-serif">
I don’t have the firewall in pfSense to block traffic between these networks yet, so they can all freely talk to each other.</p>
<p style="margin:0in;font-size:12pt;font-family:Aptos,sans-serif">
</p>
<p style="margin:0in;font-size:12pt;font-family:Aptos,sans-serif">
Even though I have my Kea configured to advertise on all of the interfaces [untagged, 11, 12], I can’t seem to get anything to work unless I have the DHCP Relay service setup on the pfSense device to redirect all DHCP traffic to the Kea system’s untagged IP
address [192.168.10.3].</p>
<p style="margin:0in;font-size:12pt;font-family:Aptos,sans-serif">
</p>
<p style="margin:0in;font-size:12pt;font-family:Aptos,sans-serif">
I can verify through nmap that udp port 67 is running on all three interfaces.</p>
<p style="margin:0in;font-size:12pt;font-family:Aptos,sans-serif">
</p>
<p style="margin:0in;font-size:12pt;font-family:Aptos,sans-serif">
If I turn off the DHCP Relay service, I was expecting the interfaces to pick up on the DHCP requests from devices on all of these networks.</p>
<p style="margin:0in;font-size:12pt;font-family:Aptos,sans-serif">
</p>
<p style="margin:0in;font-size:12pt;font-family:Aptos,sans-serif">
This doesn’t happen and devices don’t get addresses. I’ve even watched the logs I’ve split out and nothing is written for the duration that the relay service is turned off. As soon as I turn it back on, I start seeing traffic again.</p>
<p style="margin:0in;font-size:12pt;font-family:Aptos,sans-serif">
</p>
<p style="margin:0in;font-size:12pt;font-family:Aptos,sans-serif">
I’m running Kea 2.6.0.</p>
<p style="margin:0in;font-size:12pt;font-family:Aptos,sans-serif">
</p>
<p style="margin:0in;font-size:12pt;font-family:Aptos,sans-serif">
I’d love to turn the DHCP Relay off to then try to troubleshoot another issue I’m having with bridging interfaces to VMs and then having the VM interface assigned to a vlan other than the bridged interface. It seems to work for something else I’m doing, but
just trying to rule some things out. Probably another post if I can figure out why the DHCP Relay seems to need to be on.</p>
<p style="margin:0in;font-size:12pt;font-family:Aptos,sans-serif">
</p>
<p style="margin:0in;font-size:12pt;font-family:Aptos,sans-serif">
Any ideas why I need the DHCP Relay service on another device even though all of the interfaces on each respective vlan are configured to listen for dhcp requests?</p>
<p style="margin:0in;font-size:12pt;font-family:Aptos,sans-serif">
<br>
</p>
<p style="margin:0in;font-size:12pt;font-family:Aptos,sans-serif">
-Ubence</p>
</div>
</div>
</div>
</div>
-- <br>
ISC funds the development of this software with paid support subscriptions. Contact us at <a href="https://www.isc.org/contact/" rel="noreferrer" target="_blank">https://www.isc.org/contact/</a> for more information.<br>
<br>
To unsubscribe visit <a href="https://lists.isc.org/mailman/listinfo/kea-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/kea-users</a>.<br>
<br>
Kea-users mailing list<br>
<a href="mailto:Kea-users@lists.isc.org" target="_blank">Kea-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/kea-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/kea-users</a><br>
</div></blockquote></div>