<div dir="ltr">Thanks for the response and the link, it is very helpful.<div><br></div><div>I'm seeing the DHCP relay traffic I would expect to see.</div><div><br></div><div>I'm going to test over the weekend disabling the DHCP relay and see what I see then.</div><div><br></div><div>-Ubence</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Jul 18, 2024 at 1:29 AM DDFR | Ronald Blaas <<a href="mailto:ronald.blaas@ddfr.nl">ronald.blaas@ddfr.nl</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div class="msg7088361702172647045">
<div dir="ltr">
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
A yes I see.</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
You are using virtual interfaces. </div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
This should work.</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
As for relay, no you do not need relay as the DHCP server is configured inside the same network.</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
Like suggested by others you need to run a tcpdump to see what/if packets are received by your dhcp server.</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
An example would be: tcpdump -i eno2.11 port 67 or port 68 -e -n -vv</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
(<a href="https://unixhealthcheck.com/blog?id=433" id="m_7088361702172647045OWA3d0831ee-6517-d428-d80f-b751f2bc1c6c" title="https://unixhealthcheck.com/blog?id=433" target="_blank">source</a>)</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
Should be run as root (or sudo)</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
<br>
</div>
<div id="m_7088361702172647045Signature" style="color:inherit">
<p style="text-align:left;line-height:normal;background-color:rgb(255,255,255);margin:0px;font-family:Helvetica;font-size:11px">
<span style="font-family:Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">You should see some traffic from machines requesting DHCP</span></p>
<p style="text-align:left;line-height:normal;background-color:rgb(255,255,255);margin:0px;font-family:Helvetica;font-size:11px">
<span style="font-family:Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)"><br>
</span></p>
<p style="text-align:left;line-height:normal;background-color:rgb(255,255,255);margin:0px;font-family:Helvetica;font-size:11px">
<span style="font-family:Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">regards</span></p>
<p style="text-align:left;line-height:normal;background-color:rgb(255,255,255);margin:0px;min-height:13px;font-family:Helvetica;font-size:11px">
<br>
</p>
<p style="text-align:left;line-height:normal;background-color:rgb(255,255,255);margin:0px;font-family:Helvetica;font-size:11px">
<span style="font-family:Calibri,Helvetica,sans-serif;font-size:11pt">Ronald Blaas</span></p>
<p style="line-height:normal;margin:0px;min-height:12px;font-family:"Times New Roman";font-size:11px">
<br>
</p>
<div style="line-height:normal;margin:0px;min-height:12px;font-family:"Times New Roman";font-size:11px;color:rgb(0,0,0)">
<br>
</div>
</div>
<div id="m_7088361702172647045appendonsend" style="color:inherit"></div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
<br>
</div>
<hr style="display:inline-block;width:98%">
<div id="m_7088361702172647045divRplyFwdMsg" dir="ltr" style="color:inherit"><span style="font-family:Calibri,sans-serif;font-size:11pt;color:rgb(0,0,0)"><b>From:</b> Kea-users <<a href="mailto:kea-users-bounces@lists.isc.org" target="_blank">kea-users-bounces@lists.isc.org</a>> on behalf of Ubence Quevedo <<a href="mailto:thatrat@gmail.com" target="_blank">thatrat@gmail.com</a>><br>
<b>Sent:</b> Wednesday, July 17, 2024 13:30<br>
<b>To:</b> Kea user's list <<a href="mailto:kea-users@lists.isc.org" target="_blank">kea-users@lists.isc.org</a>><br>
<b>Subject:</b> Re: [Kea-users] [EXTERNAL] Re: Need to have DHCP Relay in order for Kea to work...?</span>
<div> </div>
</div>
<table align="left" style="display:table;width:100%;table-layout:fixed;border-collapse:collapse;border-spacing:0px;box-sizing:border-box;color:inherit;background-color:inherit">
<tbody>
<tr>
<td style="background-color:rgb(166,166,166);padding:7px 2px;vertical-align:middle;width:1px">
</td>
<td style="text-align:left;background-color:rgb(234,234,234);padding:7px 5px 7px 15px;vertical-align:middle;color:rgb(33,33,33);width:100%">
<div style="text-align:left;font-family:wf_segoe-ui_normal,"Segoe UI","Segoe WP",Tahoma,Arial,sans-serif;font-size:12px">
U ontvangt niet vaak e-mail van <a href="mailto:thatrat@gmail.com" target="_blank">thatrat@gmail.com</a>. <a href="https://aka.ms/LearnAboutSenderIdentification" id="m_7088361702172647045OWA36f3a355-a15b-339e-5b8f-bb2232901f2d" target="_blank">
Meer informatie over waarom dit belangrijk is</a></div>
</td>
<td align="left" style="background-color:rgb(234,234,234);padding:7px 5px;vertical-align:middle;color:rgb(33,33,33);width:75px">
</td>
</tr>
</tbody>
</table>
<div style="direction:ltr">Thanks for the response.</div>
<div style="direction:ltr"><br>
</div>
<div style="direction:ltr">Here are the interfaces configured on the server. eno2 is the main interface [untagged] and then there is eno2.11 and eno2.12 respectively for vlan 11 and 12:<br>
<span style="font-family:monospace">eno2: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500<br>
inet 192.168.10.3 netmask 255.255.255.0 broadcast 192.168.10.255<br>
inet6 fe80::f604:def0:9990:a797 prefixlen 64 scopeid 0x20<link><br>
ether 50:eb:f6:4f:6c:2e txqueuelen 1000 (Ethernet)<br>
RX packets 21002000 bytes 4720351435 (4.7 GB)<br>
RX errors 0 dropped 0 overruns 0 frame 0<br>
TX packets 5775391 bytes 1207246387 (1.2 GB)<br>
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0<br>
device interrupt 16 memory 0x51200000-51220000<br>
<br>
eno2.11: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500<br>
inet 192.168.11.3 netmask 255.255.255.0 broadcast 192.168.11.255<br>
inet6 fd19:e769:2155:aa4a:2ca5:722f:5815:fd88 prefixlen 64 scopeid 0x0<global><br>
inet6 fd19:e769:2155:aa4a:8123:1ebe:15d1:88a1 prefixlen 64 scopeid 0x0<global><br>
inet6 fe80::1b5:af43:403b:d5d7 prefixlen 64 scopeid 0x20<link><br>
inet6 fd19:e769:2155:aa4a:8997:46a6:a4fc:ddbc prefixlen 64 scopeid 0x0<global><br>
inet6 fd19:e769:2155:aa4a:83de:c6c8:c181:5dbe prefixlen 64 scopeid 0x0<global><br>
inet6 fd19:e769:2155:aa4a:596c:3610:d7b4:1d18 prefixlen 64 scopeid 0x0<global><br>
inet6 fd19:e769:2155:aa4a:a2ed:50cf:5609:5e0e prefixlen 64 scopeid 0x0<global><br>
inet6 fd19:e769:2155:aa4a:bcfe:867f:4dc:c8f8 prefixlen 64 scopeid 0x0<global><br>
inet6 fd19:e769:2155:aa4a:14a6:e870:b2ad:d2d9 prefixlen 64 scopeid 0x0<global><br>
ether 50:eb:f6:4f:6c:2e txqueuelen 1000 (Ethernet)<br>
RX packets 5820439 bytes 1191558319 (1.1 GB)<br>
RX errors 0 dropped 11 overruns 0 frame 0<br>
TX packets 2733488 bytes 637055127 (637.0 MB)<br>
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0<br>
<br>
eno2.12: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500<br>
inet 192.168.12.3 netmask 255.255.255.0 broadcast 192.168.12.255<br>
inet6 fe80::fda3:7df7:98b0:d9e6 prefixlen 64 scopeid 0x20<link><br>
ether 50:eb:f6:4f:6c:2e txqueuelen 1000 (Ethernet)<br>
RX packets 7737728 bytes 1816607005 (1.8 GB)<br>
RX errors 0 dropped 0 overruns 0 frame 0<br>
TX packets 529891 bytes 125658614 (125.6 MB)<br>
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0</span></div>
<div style="direction:ltr"><br>
</div>
<div style="direction:ltr">My interfaces in <span style="font-family:monospace">
kea-dhcp4.conf</span> are configured like:</div>
<div style="direction:ltr;font-family:monospace">"interfaces": [ "eno2/<a href="http://192.168.10.3/" id="m_7088361702172647045OWA948789b3-bcd1-4835-42b6-33f7277a12b0" target="_blank">192.168.10.3</a>","eno2.11/<a href="http://192.168.11.3/" id="m_7088361702172647045OWAc4062bd8-f30f-6a99-cfaa-460165c401a4" target="_blank">192.168.11.3</a>","eno2.12/<a href="http://192.168.12.3/" id="m_7088361702172647045OWA56a15a4e-7df6-09f5-6b96-4b8f040f6aac" target="_blank">192.168.12.3</a>"
]</div>
<div style="direction:ltr"><br>
</div>
<div style="direction:ltr">This is why I'm a little baffled why I need the dhcp relay since all of the interfaces should be listening on each vlan but aren't picking up the traffic.</div>
<div style="direction:ltr"><br>
</div>
<div style="direction:ltr">Routing has been an issue on my network, which is related to another post I'm going to make later with bridged interfaces and dhcp requests from VMs to those bridged interfaces not getting IP addresses even though the server is
receiving the request but the client isn't acknowledging them for some reason.</div>
<div style="direction:ltr"><br>
</div>
<div style="direction:ltr">-Ubence</div>
<div style="direction:ltr"><br>
</div>
<div style="direction:ltr">On Tue, Jul 16, 2024 at 11:52 PM DDFR | Ronald Blaas <<a href="mailto:ronald.blaas@ddfr.nl" id="m_7088361702172647045OWAf7fae3cc-16c2-3413-82a9-937a31a2d8ae" target="_blank">ronald.blaas@ddfr.nl</a>> wrote:</div>
<blockquote style="margin:0px 0px 0px 0.8ex;padding-left:1ex;border-left:1px solid rgb(204,204,204)">
<div style="direction:ltr;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
Hi</div>
<div style="direction:ltr;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
<br>
</div>
<div style="direction:ltr;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
Not really sure what you mean here: "has one interface that I've setup with vlan interfaces"</div>
<div style="direction:ltr;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
<br>
</div>
<div style="direction:ltr;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
Like what has been said before, either the DHCP server has an IP address in every IP subnet or you will have to make use of DHCP relay. </div>
<div style="direction:ltr;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
<br>
</div>
<div style="direction:ltr;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
The DHCP server must know from which network the DHCP request is coming from. </div>
<div style="direction:ltr;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
<br>
</div>
<div style="direction:ltr;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
As for logging, if there is nothing in the log you must have a routing problem (it is always routing 😋) </div>
<div style="direction:ltr;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
<br>
</div>
<div style="direction:ltr;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:11pt;color:rgb(0,0,0)">
<br>
</div>
<div style="direction:ltr;font-family:Helvetica;font-size:11px;color:rgb(0,0,0)">
<br>
</div>
<div id="m_7088361702172647045x_m_-9124214366933581526Signature" style="color:inherit">
<p style="text-align:left;line-height:normal;background-color:rgb(255,255,255);margin:0px;font-family:Helvetica;font-size:11px">
<span style="font-family:Calibri,Helvetica,sans-serif;font-size:11pt">Ronald</span></p>
</div>
<div style="direction:ltr"><br>
</div>
<hr style="direction:ltr;display:inline-block;width:98%">
<div id="m_7088361702172647045x_m_-9124214366933581526divRplyFwdMsg" dir="ltr" style="color:inherit">
<span style="font-family:Calibri,sans-serif;font-size:11pt;color:rgb(0,0,0)"><b>From:</b> Kea-users <<a href="mailto:kea-users-bounces@lists.isc.org" id="m_7088361702172647045OWA72b22efc-36e3-ffb4-5a81-02e22520a6fd" target="_blank">kea-users-bounces@lists.isc.org</a>>
on behalf of Ubence Quevedo <<a href="mailto:thatrat@gmail.com" id="m_7088361702172647045OWAc8321c74-6014-6257-bbc4-b37d2d1a92c7" target="_blank">thatrat@gmail.com</a>><br>
<b>Sent:</b> Tuesday, July 16, 2024 13:04<br>
<b>To:</b> Kea user's list <<a href="mailto:kea-users@lists.isc.org" id="m_7088361702172647045OWAe8cb17ce-c905-e260-48cb-28b443868257" target="_blank">kea-users@lists.isc.org</a>><br>
<b>Subject:</b> Re: [Kea-users] [EXTERNAL] Re: Need to have DHCP Relay in order for Kea to work...?</span>
<div> </div>
</div>
<table align="left" style="direction:ltr;display:table;width:100%;table-layout:fixed;box-sizing:border-box;border-collapse:collapse;border-spacing:0px;color:inherit;background-color:inherit">
<tbody>
<tr>
<td style="direction:ltr;background-color:rgb(166,166,166);padding:7px 2px;vertical-align:middle;width:1px">
</td>
<td style="direction:ltr;text-align:left;background-color:rgb(234,234,234);padding:7px 5px 7px 15px;vertical-align:middle;color:rgb(33,33,33);width:100%">
<div style="direction:ltr;text-align:left;font-family:wf_segoe-ui_normal,"Segoe UI","Segoe WP",Tahoma,Arial,sans-serif;font-size:12px">
U ontvangt niet vaak e-mail van <a href="mailto:thatrat@gmail.com" id="m_7088361702172647045OWA0ad4272c-3ee7-7cc4-c0ef-0e5f0d1757dc" target="_blank">
thatrat@gmail.com</a>. <a href="https://aka.ms/LearnAboutSenderIdentification" id="m_7088361702172647045OWAfd080828-f273-e195-7120-125ed8570a78" target="_blank">
Meer informatie over waarom dit belangrijk is</a></div>
</td>
<td align="left" style="direction:ltr;background-color:rgb(234,234,234);padding:7px 5px;vertical-align:middle;color:rgb(33,33,33);width:75px">
</td>
</tr>
</tbody>
</table>
<div style="direction:ltr">Thanks for all of the responses on this.</div>
<div style="direction:ltr"><br>
</div>
<div style="direction:ltr">The system that is the Kea DHCP server [an Ubuntu system] has one interface that I've setup with vlan interfaces.</div>
<div style="direction:ltr"><br>
</div>
<div style="direction:ltr">I can access these other interfaces and verified through nmap that port 67 is open on all interfaces.</div>
<div style="direction:ltr"><br>
</div>
<div style="direction:ltr">I can't seem to find any kind of ip helper option in the Unifi Controller [v8.2.93 running on a virtual Ubuntu system].</div>
<div style="direction:ltr"><br>
</div>
<div style="direction:ltr">I've reconfigured the DHCP Relay on the pfSense to point to all of the interfaces, and I'm now seeing the traffic I'm expecting to see, which is fine since. understand a little better of what might be going on.</div>
<div style="direction:ltr"><br>
</div>
<div style="direction:ltr">Just a little confused as to why the broadcast traffic for DHCP requests doesn't seem to be picked up on the vlan interfaces on the server.</div>
<div style="direction:ltr"><br>
</div>
<div style="direction:ltr">I do have another question, but I'll put that in a separate post since it doesn't seem to be related to this question at hand.</div>
<div style="direction:ltr"><br>
</div>
<div style="direction:ltr">-Ubence</div>
<div style="direction:ltr"><br>
</div>
<div style="direction:ltr">On Mon, Jul 15, 2024 at 6:59 AM Joe Craig <<a href="mailto:JCraig@applieddigital.com" id="m_7088361702172647045OWA0e252aa9-bb78-18d9-b2b9-dec779086983" target="_blank">JCraig@applieddigital.com</a>> wrote:</div>
<blockquote style="margin:0px 0px 0px 0.8ex;padding-left:1ex;border-left:1px solid rgb(204,204,204)">
<p style="direction:ltr"><span style="font-size:11pt">Question about the setup. On the network switches that the DHCP requests would hit first, do you have IP Helpers configured? In my experience that’s what I’ve had to do to ensure that the packets make
it to the DHCP server without a DHCP Relay. I’m in an environment where I cannot deploy a DHCP Relay service, so I am leveraging the IP Helpers on an L3 switch to forward those requests. This is passing through an Cisco firewall and all that. Hope that helps.</span></p>
<p style="direction:ltr"><span style="font-size:11pt"> </span></p>
<p style="direction:ltr"><span style="font-size:11pt">Thanks,</span></p>
<p style="direction:ltr"><span style="font-size:11pt"> </span></p>
<p style="direction:ltr;background-color:white;margin-top:2pt"><span style="font-size:11pt;color:black"><b>Joseph Craig</b><br>
Systems Engineer<br>
</span><span style="color:black"><img id="m_7088361702172647045x_m_-9124214366933581526x_m_-5356132953557032457Picture_x0020_2" width="192" height="51" style="width: 2in; height: 0.5347in; margin-top: 0px; margin-bottom: 0px;" src="cid:ii_190cab5a40c4cff311"></span><span style="font-size:11pt;color:black"><br>
<br>
</span></p>
<p style="direction:ltr"><span style="font-size:11pt"> </span></p>
<div style="padding:3pt 0in 0in;border-top:1pt solid rgb(225,225,225)">
<p style="direction:ltr"><span style="font-family:Calibri,sans-serif;font-size:11pt"><b>From:</b> Kea-users <<a href="mailto:kea-users-bounces@lists.isc.org" id="m_7088361702172647045OWA0b84b26d-17df-0adb-d64b-307de6283e67" style="margin-top:0px;margin-bottom:0px" target="_blank">kea-users-bounces@lists.isc.org</a>>
<b>On Behalf Of </b>DDFR | Ronald Blaas<br>
<b>Sent:</b> Monday, July 15, 2024 2:15 AM<br>
<b>To:</b> <a href="mailto:kea-users@lists.isc.org" id="m_7088361702172647045OWAb48367d2-bca2-3c96-ce5d-fa485f3cb75a" style="margin-top:0px;margin-bottom:0px" target="_blank">
kea-users@lists.isc.org</a><br>
<b>Subject:</b> [EXTERNAL] Re: [Kea-users] Need to have DHCP Relay in order for Kea to work...?</span></p>
</div>
<p style="direction:ltr"> </p>
<table align="left" style="direction:ltr;width:100%;box-sizing:border-box;border-collapse:collapse;border-spacing:0px;color:inherit;background-color:inherit">
<tbody>
<tr>
<td style="direction:ltr;background-color:rgb(166,166,166);padding:5.25pt 1.5pt">
</td>
<td style="direction:ltr;background-color:rgb(234,234,234);padding:5.25pt 3.75pt 5.25pt 11.25pt;width:100%">
<p style="direction:ltr"><span style="font-family:"Segoe UI",sans-serif;font-size:9pt;color:rgb(33,33,33)">You don't often get email from
<a href="mailto:ronald.blaas@ddfr.nl" id="m_7088361702172647045OWAebf5a665-5a31-0894-f0f7-e2059e0ded3a" style="margin-top:0px;margin-bottom:0px" target="_blank">
ronald.blaas@ddfr.nl</a>. <a href="https://aka.ms/LearnAboutSenderIdentification" id="m_7088361702172647045OWAae3a72bc-fb36-96a8-6764-60031519bf8b" style="margin-top:0px;margin-bottom:0px" target="_blank">
Learn why this is important</a></span></p>
</td>
<td style="direction:ltr;background-color:rgb(234,234,234);padding:5.25pt 3.75pt;width:56.25pt">
</td>
</tr>
</tbody>
</table>
<p style="direction:ltr"><span style="font-size:11pt;color:black">Not really sure how you have your network setup. </span></p>
<p style="direction:ltr"><span style="font-size:11pt;color:black"> </span></p>
<p style="direction:ltr"><span style="font-size:11pt;color:black">But in my belief, if you want dhcp to work without RELAY you have to make sure your DHCP server is directly connected to all the LANs. So your DHCP server will need to have multiple Nics. </span></p>
<p style="direction:ltr"><span style="font-size:11pt;color:black"> </span></p>
<p style="direction:ltr"><span style="font-size:11pt;color:black">Is there a particular reason you do not want to have a dhcp relay? </span></p>
<p style="direction:ltr"><span style="font-size:11pt;color:black"> </span></p>
<p style="direction:ltr"><span style="font-size:11pt;color:black">I have a kinda similar setup and am using DHCP relay. It is operating as expected and without problems.</span></p>
<p style="direction:ltr"><span style="font-size:11pt;color:black"> </span></p>
<p style="direction:ltr"><span style="font-size:11pt;color:black">It is also wise to share the output of your log file with the error you are receiving. </span></p>
<p style="direction:ltr"><span style="font-size:11pt;color:black">Tis helps in pinpointing the problem.</span></p>
<p style="direction:ltr"><span style="font-size:11pt;color:black"> </span></p>
<p style="direction:ltr"><span style="font-size:11pt;color:black">Regards</span></p>
<p style="direction:ltr"><span style="font-size:11pt;color:black"> </span></p>
<div id="m_7088361702172647045x_m_-9124214366933581526x_m_-5356132953557032457Signature" style="color:inherit">
<p style="background-color:white"><span style="font-family:Helvetica,sans-serif;font-size:8.5pt"> </span></p>
<p style="background-color:white"><span style="font-family:Calibri,sans-serif;font-size:11pt;color:black">Ronald </span></p>
<p style="min-height:12px"><span style="font-family:"Times New Roman",serif;font-size:8.5pt"> </span></p>
<p><span style="font-family:"Times New Roman",serif;font-size:8.5pt;color:black"> </span></p>
</div>
<div align="center">
<hr align="center" style="direction:ltr;width:98%">
</div>
<div id="m_7088361702172647045x_m_-9124214366933581526x_m_-5356132953557032457divRplyFwdMsg" style="color:inherit">
<p><span style="font-family:Calibri,sans-serif;font-size:11pt;color:black"><b>From:</b> Kea-users <<a href="mailto:kea-users-bounces@lists.isc.org" id="m_7088361702172647045OWA2b146899-a242-18b7-8a47-23389d49034e" style="margin-top:0px;margin-bottom:0px" target="_blank">kea-users-bounces@lists.isc.org</a>>
on behalf of Ubence Quevedo <<a href="mailto:thatrat@gmail.com" id="m_7088361702172647045OWA19c2175f-3716-b1f5-2c92-9844eb4d2101" style="margin-top:0px;margin-bottom:0px" target="_blank">thatrat@gmail.com</a>><br>
<b>Sent:</b> Monday, July 15, 2024 00:26<br>
<b>To:</b> <a href="mailto:kea-users@lists.isc.org" id="m_7088361702172647045OWA9587cea5-c6ab-9085-3a5f-dff5670c3a14" style="margin-top:0px;margin-bottom:0px" target="_blank">
kea-users@lists.isc.org</a> <<a href="mailto:kea-users@lists.isc.org" id="m_7088361702172647045OWA0ead6309-a69d-0625-ea0e-5d970b9b3da0" style="margin-top:0px;margin-bottom:0px" target="_blank">kea-users@lists.isc.org</a>><br>
<b>Subject:</b> [Kea-users] Need to have DHCP Relay in order for Kea to work...?</span></p>
<p> </p>
</div>
<table align="left" style="direction:ltr;display:table;width:100%;box-sizing:border-box;border-collapse:collapse;border-spacing:0px;color:inherit;background-color:inherit">
<tbody>
<tr>
<td style="direction:ltr;background-color:rgb(166,166,166);padding:5.25pt 1.5pt">
</td>
<td style="direction:ltr;background-color:rgb(234,234,234);padding:5.25pt 3.75pt 5.25pt 11.25pt;width:100%">
<p style="direction:ltr"><span style="font-family:"Segoe UI",sans-serif;font-size:9pt;color:rgb(33,33,33)">U ontvangt niet vaak e-mail van
<a href="mailto:thatrat@gmail.com" id="m_7088361702172647045OWA11261c4b-20c5-0824-9555-4bd3d9206321" style="margin-top:0px;margin-bottom:0px" target="_blank">
thatrat@gmail.com</a>. <a href="https://aka.ms/LearnAboutSenderIdentification" id="m_7088361702172647045OWAe7c08157-c3fd-6bc8-923a-0d819aabacbc" style="margin-top:0px;margin-bottom:0px" target="_blank">
Meer informatie over waarom dit belangrijk is</a></span></p>
</td>
<td style="direction:ltr;background-color:rgb(234,234,234);padding:5.25pt 3.75pt;width:56.25pt">
</td>
</tr>
</tbody>
</table>
<p style="direction:ltr">Hi Everyone,</p>
<p style="direction:ltr"> </p>
<p style="direction:ltr">I’ve been using Kea for just under a year for a home setup on a Linux Ubuntu server. I switched from isc dhcp since it was end of life. My setup has a lot of MAC address reservations with some general pools for systems that don’t
have IP reservations.</p>
<p style="direction:ltr"> </p>
<p style="direction:ltr">I also have a few vlans set up with the reservations for devices on each of the vlans. I’m using pfSense as my gateway with some Unifi equipment that is vlan aware.</p>
<p style="direction:ltr"> </p>
<p style="direction:ltr">I’m running into an issue and I’m not sure why and would love some advice on how to look into this.</p>
<p style="direction:ltr"> </p>
<p style="direction:ltr">I have the interfaces on the system setup that is running Kea, to advertise on the untagged network [mostly some servers], vlan 11 [user systems], and vlan12 [IoT devices].</p>
<p style="direction:ltr"> </p>
<p style="direction:ltr">I don’t have the firewall in pfSense to block traffic between these networks yet, so they can all freely talk to each other.</p>
<p style="direction:ltr"> </p>
<p style="direction:ltr">Even though I have my Kea configured to advertise on all of the interfaces [untagged, 11, 12], I can’t seem to get anything to work unless I have the DHCP Relay service setup on the pfSense device to redirect all DHCP traffic to the
Kea system’s untagged IP address [192.168.10.3].</p>
<p style="direction:ltr"> </p>
<p style="direction:ltr">I can verify through nmap that udp port 67 is running on all three interfaces.</p>
<p style="direction:ltr"> </p>
<p style="direction:ltr">If I turn off the DHCP Relay service, I was expecting the interfaces to pick up on the DHCP requests from devices on all of these networks.</p>
<p style="direction:ltr"> </p>
<p style="direction:ltr">This doesn’t happen and devices don’t get addresses. I’ve even watched the logs I’ve split out and nothing is written for the duration that the relay service is turned off. As soon as I turn it back on, I start seeing traffic again.</p>
<p style="direction:ltr"> </p>
<p style="direction:ltr">I’m running Kea 2.6.0.</p>
<p style="direction:ltr"> </p>
<p style="direction:ltr">I’d love to turn the DHCP Relay off to then try to troubleshoot another issue I’m having with bridging interfaces to VMs and then having the VM interface assigned to a vlan other than the bridged interface. It seems to work for something
else I’m doing, but just trying to rule some things out. Probably another post if I can figure out why the DHCP Relay seems to need to be on.</p>
<p style="direction:ltr"> </p>
<p style="direction:ltr">Any ideas why I need the DHCP Relay service on another device even though all of the interfaces on each respective vlan are configured to listen for dhcp requests?</p>
<p style="direction:ltr"> </p>
<p style="direction:ltr">-Ubence</p>
<div style="direction:ltr">--<br>
ISC funds the development of this software with paid support subscriptions. Contact us at
<a href="https://www.isc.org/contact/" id="m_7088361702172647045OWAe614cba1-e7ec-7741-669f-371b5a4d6e95" target="_blank">
https://www.isc.org/contact/</a> for more information.<br>
<br>
To unsubscribe visit <a href="https://lists.isc.org/mailman/listinfo/kea-users" id="m_7088361702172647045OWAdb090510-ed83-e30d-839b-e6a0b531c86b" target="_blank">
https://lists.isc.org/mailman/listinfo/kea-users</a>.<br>
<br>
Kea-users mailing list<br>
<a href="mailto:Kea-users@lists.isc.org" id="m_7088361702172647045OWA2bb3efb3-922a-24d5-45d3-76896e730b0c" target="_blank">Kea-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/kea-users" id="m_7088361702172647045OWA6bb0b30e-154f-d6bf-36a0-2cfc006a1cc6" target="_blank">https://lists.isc.org/mailman/listinfo/kea-users</a></div>
</blockquote>
<div style="direction:ltr">--<br>
ISC funds the development of this software with paid support subscriptions. Contact us at
<a href="https://www.isc.org/contact/" id="m_7088361702172647045OWA755fa73a-426a-eeaa-a369-a8359297c0e8" target="_blank">
https://www.isc.org/contact/</a> for more information.<br>
<br>
To unsubscribe visit <a href="https://lists.isc.org/mailman/listinfo/kea-users" id="m_7088361702172647045OWA97c9c7e0-8cd3-123d-1139-608784120846" target="_blank">
https://lists.isc.org/mailman/listinfo/kea-users</a>.<br>
<br>
Kea-users mailing list<br>
<a href="mailto:Kea-users@lists.isc.org" id="m_7088361702172647045OWA764aab50-a479-e0e6-1caf-3aee23211c5e" target="_blank">Kea-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/kea-users" id="m_7088361702172647045OWA38a35612-0d89-5418-085d-9c0653a1727e" target="_blank">https://lists.isc.org/mailman/listinfo/kea-users</a></div>
</blockquote>
</div>
-- <br>
ISC funds the development of this software with paid support subscriptions. Contact us at <a href="https://www.isc.org/contact/" rel="noreferrer" target="_blank">https://www.isc.org/contact/</a> for more information.<br>
<br>
To unsubscribe visit <a href="https://lists.isc.org/mailman/listinfo/kea-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/kea-users</a>.<br>
<br>
Kea-users mailing list<br>
<a href="mailto:Kea-users@lists.isc.org" target="_blank">Kea-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/kea-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/kea-users</a><br>
</div></blockquote></div>