<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">Ok, and now it is solved.<div><br></div><div>The magic was: <span style="background-color: rgb(255, 255, 255);"><font color="#d63384" face="SFMono-Regular, Menlo, Monaco, Consolas, Liberation Mono, Courier New, monospace"><span style="caret-color: rgb(214, 51, 132); font-size: 14px;">"interface": "ens3“, in the subnet6 section. </span></font></span>interfaces-config was not enough.</div><div><br></div><div>Thank you very much for your help guys!</div><div><br></div><div>Jan<br id="lineBreakAtBeginningOfMessage"><div><br><blockquote type="cite"><div>19. 8. 2024 v 20:54, Jan Jurko via Kea-users <kea-users@lists.isc.org>:</div><br class="Apple-interchange-newline"><div><div> Hi Darren.<br>I just discovered error message in the tcpdump - Server could not select subnet for this client name_of_the_client<br><br>Jan<br><br><blockquote type="cite">19. 8. 2024 v 16:32, Jan Jurko via Kea-users <kea-users@lists.isc.org>:<br><br>Hi Darren.<br><br>Here are some tcpdump logs gathered during ipconfig /renew6 on windows machine.<br><br><br>16:28:45.345877 IP6 (flowlabel 0x50bc8, hlim 1, next-header UDP (17) payload length: 103) fe80::54a0:da31:647a:debc.546 > ff02::1:2.547: [udp sum ok] dhcp6 solicit (xid=109009 (elapsed-time 0) (client-ID hwaddr/time type 1 time 777170736 525400f4c2d7) (IA_NA IAID:106058752 T1:0 T2:0) (Client-FQDN) (vendor-class) (option-request vendor-specific-info DNS-server DNS-search-list Client-FQDN))<br>16:28:45.347124 IP6 (flowlabel 0x51d47, hlim 64, next-header UDP (17) payload length: 138) fe80::5054:ff:fefb:f887.547 > fe80::54a0:da31:647a:debc.546: [udp sum ok] dhcp6 advertise (xid=109009 (client-ID hwaddr/time type 1 time 777170736 525400f4c2d7) (server-ID hwaddr/time type 1 time 777238119 525400fbf887) (IA_NA IAID:106058752 T1:0 T2:0 (status-code NoAddrsAvail)) (Client-FQDN))<br>16:28:46.336578 IP6 (flowlabel 0x080d2, hlim 1, next-header UDP (17) payload length: 103) fe80::54a0:da31:647a:debc.546 > ff02::1:2.547: [udp sum ok] dhcp6 solicit (xid=109009 (elapsed-time 0) (client-ID hwaddr/time type 1 time 777170736 525400f4c2d7) (IA_NA IAID:106058752 T1:0 T2:0) (Client-FQDN) (vendor-class) (option-request vendor-specific-info DNS-server DNS-search-list Client-FQDN))<br>16:28:46.337552 IP6 (flowlabel 0x51d47, hlim 64, next-header UDP (17) payload length: 138) fe80::5054:ff:fefb:f887.547 > fe80::54a0:da31:647a:debc.546: [udp sum ok] dhcp6 advertise (xid=109009 (client-ID hwaddr/time type 1 time 777170736 525400f4c2d7) (server-ID hwaddr/time type 1 time 777238119 525400fbf887) (IA_NA IAID:106058752 T1:0 T2:0 (status-code NoAddrsAvail)) (Client-FQDN))<br>16:28:46.338244 IP6 (flowlabel 0x080d2, hlim 1, next-header UDP (17) payload length: 103) fe80::54a0:da31:647a:debc.546 > ff02::1:2.547: [udp sum ok] dhcp6 solicit (xid=109009 (elapsed-time 0) (client-ID hwaddr/time type 1 time 777170736 525400f4c2d7) (IA_NA IAID:106058752 T1:0 T2:0) (Client-FQDN) (vendor-class) (option-request vendor-specific-info DNS-server DNS-search-list Client-FQDN))<br>16:28:46.338882 IP6 (flowlabel 0x51d47, hlim 64, next-header UDP (17) payload length: 138) fe80::5054:ff:fefb:f887.547 > fe80::54a0:da31:647a:debc.546: [udp sum ok] dhcp6 advertise (xid=109009 (client-ID hwaddr/time type 1 time 777170736 525400f4c2d7) (server-ID hwaddr/time type 1 time 777238119 525400fbf887) (IA_NA IAID:106058752 T1:0 T2:0 (status-code NoAddrsAvail)) (Client-FQDN))<br>16:28:46.345023 IP6 (flowlabel 0x080d2, hlim 1, next-header UDP (17) payload length: 103) fe80::54a0:da31:647a:debc.546 > ff02::1:2.547: [udp sum ok] dhcp6 solicit (xid=109009 (elapsed-time 0) (client-ID hwaddr/time type 1 time 777170736 525400f4c2d7) (IA_NA IAID:106058752 T1:0 T2:0) (Client-FQDN) (vendor-class) (option-request vendor-specific-info DNS-server DNS-search-list Client-FQDN))<br>16:28:46.346179 IP6 (flowlabel 0x51d47, hlim 64, next-header UDP (17) payload length: 138) fe80::5054:ff:fefb:f887.547 > fe80::54a0:da31:647a:debc.546: [udp sum ok] dhcp6 advertise (xid=109009 (client-ID hwaddr/time type 1 time 777170736 525400f4c2d7) (server-ID hwaddr/time type 1 time 777238119 525400fbf887) (IA_NA IAID:106058752 T1:0 T2:0 (status-code NoAddrsAvail)) (Client-FQDN))<br>16:28:46.346691 IP6 (flowlabel 0x080d2, hlim 1, next-header UDP (17) payload length: 103) fe80::54a0:da31:647a:debc.546 > ff02::1:2.547: [udp sum ok] dhcp6 solicit (xid=109009 (elapsed-time 0) (client-ID hwaddr/time type 1 time 777170736 525400f4c2d7) (IA_NA IAID:106058752 T1:0 T2:0) (Client-FQDN) (vendor-class) (option-request vendor-specific-info DNS-server DNS-search-list Client-FQDN))<br>16:28:46.347208 IP6 (flowlabel 0x51d47, hlim 64, next-header UDP (17) payload length: 138) fe80::5054:ff:fefb:f887.547 > fe80::54a0:da31:647a:debc.546: [udp sum ok] dhcp6 advertise (xid=109009 (client-ID hwaddr/time type 1 time 777170736 525400f4c2d7) (server-ID hwaddr/time type 1 time 777238119 525400fbf887) (IA_NA IAID:106058752 T1:0 T2:0 (status-code NoAddrsAvail)) (Client-FQDN))<br>16:28:46.347629 IP6 (flowlabel 0x080d2, hlim 1, next-header UDP (17) payload length: 103) fe80::54a0:da31:647a:debc.546 > ff02::1:2.547: [udp sum ok] dhcp6 solicit (xid=109009 (elapsed-time 0) (client-ID hwaddr/time type 1 time 777170736 525400f4c2d7) (IA_NA IAID:106058752 T1:0 T2:0) (Client-FQDN) (vendor-class) (option-request vendor-specific-info DNS-server DNS-search-list Client-FQDN))<br>16:28:46.348078 IP6 (flowlabel 0x51d47, hlim 64, next-header UDP (17) payload length: 138) fe80::5054:ff:fefb:f887.547 > fe80::54a0:da31:647a:debc.546: [udp sum ok] dhcp6 advertise (xid=109009 (client-ID hwaddr/time type 1 time 777170736 525400f4c2d7) (server-ID hwaddr/time type 1 time 777238119 525400fbf887) (IA_NA IAID:106058752 T1:0 T2:0 (status-code NoAddrsAvail)) (Client-FQDN))<br>16:28:46.348483 IP6 (flowlabel 0x080d2, hlim 1, next-header UDP (17) payload length: 103) fe80::54a0:da31:647a:debc.546 > ff02::1:2.547: [udp sum ok] dhcp6 solicit (xid=109009 (elapsed-time 0) (client-ID hwaddr/time type 1 time 777170736 525400f4c2d7) (IA_NA IAID:106058752 T1:0 T2:0) (Client-FQDN) (vendor-class) (option-request vendor-specific-info DNS-server DNS-search-list Client-FQDN))<br>16:28:46.348923 IP6 (flowlabel 0x51d47, hlim 64, next-header UDP (17) payload length: 138) fe80::5054:ff:fefb:f887.547 > fe80::54a0:da31:647a:debc.546: [udp sum ok] dhcp6 advertise (xid=109009 (client-ID hwaddr/time type 1 time 777170736 525400f4c2d7) (server-ID hwaddr/time type 1 time 777238119 525400fbf887) (IA_NA IAID:106058752 T1:0 T2:0 (status-code NoAddrsAvail)) (Client-FQDN))<br>16:28:46.349395 IP6 (flowlabel 0x080d2, hlim 1, next-header UDP (17) payload length: 103) fe80::54a0:da31:647a:debc.546 > ff02::1:2.547: [udp sum ok] dhcp6 solicit (xid=109009 (elapsed-time 0) (client-ID hwaddr/time type 1 time 777170736 525400f4c2d7) (IA_NA IAID:106058752 T1:0 T2:0) (Client-FQDN) (vendor-class) (option-request vendor-specific-info DNS-server DNS-search-list Client-FQDN))<br>16:28:46.349856 IP6 (flowlabel 0x51d47, hlim 64, next-header UDP (17) payload length: 138) fe80::5054:ff:fefb:f887.547 > fe80::54a0:da31:647a:debc.546: [udp sum ok] dhcp6 advertise (xid=109009 (client-ID hwaddr/time type 1 time 777170736 525400f4c2d7) (server-ID hwaddr/time type 1 time 777238119 525400fbf887) (IA_NA IAID:106058752 T1:0 T2:0 (status-code NoAddrsAvail)) (Client-FQDN))<br><br><br>Jan<br><br><blockquote type="cite">18. 8. 2024 v 23:55, Darren Ankney <darren.ankney@gmail.com>:<br><br>Hi Jan,<br><br>"Message is invalid and it is discarded." this is the reason. Though<br>I could not begin to speculate why the client is discarding the<br>message. Most likely there is some incorrect information or missing<br>information (some option was requested but was not sent). Wireshark<br>can help here. Use tcpdump to dump the packets: tcpdump -w dump.pcap<br>port 547. Open the file in Wireshark. See what was requested in the<br>Solicit vs what was sent in the Advertise.<br><br>Thank you,<br>Darren Ankney<br><br>On Sun, Aug 18, 2024 at 7:03 AM Jan Jurko via Kea-users<br><kea-users@lists.isc.org> wrote:<br><blockquote type="cite"><br>Hello Darren.<br>Thank you for your reply.<br><br>Kea and client are both on the same hypervizor, other clients are on the same network in the building so there should not be a problem with some fw etc.<br><br>I’ve enabled windows logs for dhcp and here they are:<br><br>1.<br>Information<br>Solicit is sent from the interface 4. Status code is 0x0<br><br>2.<br>Error<br>Message is invalid and it is discarded.<br><br>3.<br>Error<br>Your computer was not assigned an address from the network (by the DHCP server) for the Network Card with network address XXXX. The following error occured: 0x138E. Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.<br><br><br>There is no firewall on the clients.<br><br>As I said, Kea and rest of the computers/clients are in the same network.<br><br>I’ve tried to create the small configuration - no reservations, only pool of addresses - the same bad result.<br><br>Thank you very much for your help.<br><br>Jan<br><br><br><blockquote type="cite">18. 8. 2024 v 12:36, Darren Ankney <darren.ankney@gmail.com>:<br><br>Hi Jan,<br><br>From the log messages you have shown, it appears that Kea is<br>attempting to advertise some address to a client with DUID:<br>00:01:00:01:2e:52:af:30:52:54:00:f4:c2:d7 The client should next<br>request this address but that isn't shown in your logs. The client<br>must not like something about the advertisement or is not receiving<br>the advertisement. It would be difficult to help without more<br>information. Is this traffic relayed or do the client and server<br>exist on the same physical network? Have you looked in the client<br>logs (if exist) to see what it thinks is happening? You might try<br>adding a small pool to the subnet to see what happens (i.e., does the<br>client get an address, though I doubt that would be the case).<br><br>Thank you,<br>Darren Ankney<br><br>On Sun, Aug 18, 2024 at 5:03 AM Jan Jurko via Kea-users<br><kea-users@lists.isc.org> wrote:<br><blockquote type="cite"><br>Good day.<br>I have Kea 2.6.1 installed. I use v4 and v6 dhcp server. V4 works fine but v6 does not give clients IPv6 addresses. The setup is:<br><br>HW router with ipv6 enabled, RA enabled, M flag present. I do not use O flag because in the dualstack dns servers are on v4 addresses. So I just want to distribute ipv6 addresses from dhcp server to clients. I use hw-address to distribute addresses but I tried DUID as well.<br><br>I can see in the Kea logs this output:<br><br>2024-08-18 10:44:32.959 INFO [kea-dhcp6.dhcp6/3542.140690709083840] DHCP6_QUERY_LABEL received query: duid=[00:01:00:01:2e:52:af:30:52:54:00:f4:c2:d7], [no hwaddr info], tid=0xbea948<br>2024-08-18 10:44:32.959 INFO [kea-dhcp6.packets/3542.140690709083840] DHCP6_PACKET_RECEIVED duid=[00:01:00:01:2e:52:af:30:52:54:00:f4:c2:d7], [no hwaddr info], tid=0xbea948: SOLICIT (type 1) received from fe80::54a0:da31:647a:debc to ff02::1:2 on interface ens3<br>2024-08-18 10:44:32.959 INFO [kea-dhcp6.packets/3542.140690709083840] DHCP6_PACKET_SEND duid=[00:01:00:01:2e:52:af:30:52:54:00:f4:c2:d7], [no hwaddr info], tid=0xbea948: trying to send packet ADVERTISE (type 2) from [ff02::1:2]:547 to [fe80::54a0:da31:647a:debc]:546 on interface ens3<br>2024-08-18 10:44:33.957 INFO [kea-dhcp6.dhcp6/3542.140690717476544] DHCP6_QUERY_LABEL received query: duid=[00:01:00:01:2e:52:af:30:52:54:00:f4:c2:d7], [no hwaddr info], tid=0xbea948<br>2024-08-18 10:44:33.958 INFO [kea-dhcp6.packets/3542.140690717476544] DHCP6_PACKET_RECEIVED duid=[00:01:00:01:2e:52:af:30:52:54:00:f4:c2:d7], [no hwaddr info], tid=0xbea948: SOLICIT (type 1) received from fe80::54a0:da31:647a:debc to ff02::1:2 on interface ens3<br>2024-08-18 10:44:33.958 INFO [kea-dhcp6.packets/3542.140690717476544] DHCP6_PACKET_SEND duid=[00:01:00:01:2e:52:af:30:52:54:00:f4:c2:d7], [no hwaddr info], tid=0xbea948: trying to send packet ADVERTISE (type 2) from [ff02::1:2]:547 to [fe80::54a0:da31:647a:debc]:546 on interface ens3<br>2024-08-18 10:44:33.959 INFO [kea-dhcp6.dhcp6/3542.140690709083840] DHCP6_QUERY_LABEL received query: duid=[00:01:00:01:2e:52:af:30:52:54:00:f4:c2:d7], [no hwaddr info], tid=0xbea948<br>2024-08-18 10:44:33.959 INFO [kea-dhcp6.packets/3542.140690709083840] DHCP6_PACKET_RECEIVED duid=[00:01:00:01:2e:52:af:30:52:54:00:f4:c2:d7], [no hwaddr info], tid=0xbea948: SOLICIT (type 1) received from fe80::54a0:da31:647a:debc to ff02::1:2 on interface ens3<br>2024-08-18 10:44:33.960 INFO [kea-dhcp6.packets/3542.140690709083840] DHCP6_PACKET_SEND duid=[00:01:00:01:2e:52:af:30:52:54:00:f4:c2:d7], [no hwaddr info], tid=0xbea948: trying to send packet ADVERTISE (type 2) from [ff02::1:2]:547 to [fe80::54a0:da31:647a:de<br><br><br>I’ve used the old ISC dhcp server but I want to migrace to Kea because the old ISC dhcp server is obsolette.<br><br>Configuration file looks like this (it is truncated because there are more than 200 records):<br><br><br><br>{<br># /etc/dhcpd6.conf<br>#<br># Sample DHCPv6 configuration file for ISC dhcpd<br>#<br># *** PLEASE CONFIGURE IT FIRST ***<br>#<br># Don't forget to set the DHCPD6_INTERFACE in the<br># /etc/sysconfig/dhcpd file.<br>#<br>/// This configuration declares some subnets but has no interfaces-config<br>/// Reference Kea #245<br>"Dhcp6": {<br> "control-socket": {<br> "socket-type": "unix",<br> "socket-name": "/tmp/kea6-ctrl-socket"<br>},<br>"mac-sources": [<br> "any"<br>],<br>"loggers": [<br> {<br> "name": "kea-dhcp6",<br> "severity": "DEBUG",<br> "output_options": [<br> {<br> "output": "/var/log/kea/dhcp6.log",<br> "maxver": 10<br> }<br> ]<br> },<br> {<br> "name": "kea-dhcp6.dhcpsrv",<br> "severity": "DEBUG",<br> "output_options": [<br> {<br> "output": "/var/log/kea/dhcp6-dhcpsrv.log",<br> "maxver": 10<br> }<br> ]<br> },<br> {<br> "name": "kea-dhcp6.leases",<br> "severity": "DEBUG",<br> "output_options": [<br> {<br> "output": "/var/log/kea/dhcp6-leases.log",<br> "maxver": 10<br> }<br> ]<br> }<br> ],<br>"interfaces-config": {<br> "interfaces": [ "ens3" ]<br>},<br> "subnet6": [<br> {<br> "id": 1,<br> "subnet": „2001:XXX:XXX:0::/64",<br> "reservations": [<br> {<br> "hostname": „XXX",<br> "hw-address": "08:8f:c3:f5:ab:49",<br> "ip-addresses": [<br> „2001:XXX:XXX:0:192:168:1:75"<br> ]<br> },<br> {<br> "hostname": „AAAAA",<br> "hw-address": "08:97:98:d7:c5:d0",<br> "ip-addresses": [<br> „2001:XXX:XXX:0:192:168:0:169"<br> ]<br> }<br> ]<br>}<br>]<br>}<br>}<br><br>Thank you for your help. I’ve spent more than 10 hours debugging this problem, but still no luck.<br><br>Jan<br>--<br>ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.<br><br>To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.<br><br>Kea-users mailing list<br>Kea-users@lists.isc.org<br>https://lists.isc.org/mailman/listinfo/kea-users<br></blockquote>--<br>ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.<br><br>To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.<br><br>Kea-users mailing list<br>Kea-users@lists.isc.org<br>https://lists.isc.org/mailman/listinfo/kea-users<br></blockquote><br>--<br>ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.<br><br>To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.<br><br>Kea-users mailing list<br>Kea-users@lists.isc.org<br>https://lists.isc.org/mailman/listinfo/kea-users<br></blockquote>-- <br>ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.<br><br>To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.<br><br>Kea-users mailing list<br>Kea-users@lists.isc.org<br>https://lists.isc.org/mailman/listinfo/kea-users<br></blockquote><br>-- <br>ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.<br><br>To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.<br><br>Kea-users mailing list<br>Kea-users@lists.isc.org<br>https://lists.isc.org/mailman/listinfo/kea-users<br></blockquote><br>-- <br>ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.<br><br>To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.<br><br>Kea-users mailing list<br>Kea-users@lists.isc.org<br>https://lists.isc.org/mailman/listinfo/kea-users<br></div></div></blockquote></div><br></div></body></html>