<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Aptos;
panose-1:2 11 0 4 2 2 2 2 2 4;}
@font-face
{font-family:"Times New Roman \(Body CS\)";
panose-1:2 11 6 4 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:12.0pt;
font-family:"Aptos",sans-serif;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=en-AT link="#467886" vlink="#96607D" style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal><span lang=EN-US style='mso-fareast-language:EN-US'>Hi Peter,<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='mso-fareast-language:EN-US'>All the dhcp requests are coming through a relay agent. <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='mso-fareast-language:EN-US'>So the server isn’t in the same broadcast domain. Therefore I’ve configured dhcp-socket-type to “udp” as it’s mentioned in the documentation you posted below:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='mso-fareast-language:EN-US'>“</span><span style='mso-fareast-language:EN-US'>Therefore, in deployments where the server does not need to provision the directly connected clients and only receives the unicast packets from the relay agents, the Kea server should be configured to use UDP sockets instead of raw sockets. </span><span lang=EN-US style='mso-fareast-language:EN-US'>“<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='mso-fareast-language:EN-US'>BR, Christian<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='mso-fareast-language:EN-US'><o:p> </o:p></span></p><div id=mail-editor-reference-message-container><div><div><div><p class=MsoNormal style='margin-left:36.0pt'>On 11.11.24, 10:39, "Kea-users" <kea-users-bounces@lists.isc.org> wrote:<o:p></o:p></p></div><p class=MsoNormal style='margin-left:36.0pt'><o:p> </o:p></p><div><div><div><p class=MsoNormal style='margin-left:36.0pt'><span style='font-family:"Arial",sans-serif;color:black'>Hi Christian,<o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:36.0pt'><span style='font-family:"Arial",sans-serif;color:black'> The incoming request was from 172.21.11.104, and the lease request is for <o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:36.0pt'><span style='font-family:"Arial",sans-serif;color:black'>172.21.11.104.<o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:36.0pt'><span style='font-family:"Arial",sans-serif;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='margin-left:36.0pt'><span style='font-family:"Arial",sans-serif;color:black'>I don't know what the request packet contains, but Kea tries to send the reply <o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:36.0pt'><span style='font-family:"Arial",sans-serif;color:black'>to 255.255.255.255 - this is a Limited Scope Broadcast Address; unlike other <o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:36.0pt'><span style='font-family:"Arial",sans-serif;color:black'>types of broadcasts, packets sent to 255.255.255.255 do not pass through routers. <o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:36.0pt'><span style='font-family:"Arial",sans-serif;color:black'>Therefore, it's confined to the sender's local network segment. <o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:36.0pt'><span style='font-family:"Arial",sans-serif;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='margin-left:36.0pt'><span style='font-family:"Arial",sans-serif;color:black'>If the client with mac address b8:27:eb:12:96:74 is located in the same broadcast <o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:36.0pt'><span style='font-family:"Arial",sans-serif;color:black'>domain as the Kea server, you will need to define "dhcp-socket-type": "raw". <o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:36.0pt'><span style='font-family:"Arial",sans-serif;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='margin-left:36.0pt'><span style='font-family:"Arial",sans-serif;color:black'>See: https://kea.readthedocs.io/en/kea-2.6.1/arm/dhcp4-srv.html#interface-configuration<o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:36.0pt'><span style='font-family:"Arial",sans-serif;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='margin-left:36.0pt'><span style='font-family:"Arial",sans-serif;color:black'>/Peter<o:p></o:p></span></p></div></div><div class=MsoNormal align=center style='margin-left:36.0pt;text-align:center'><span style='font-family:"Arial",sans-serif;color:black'><hr size=0 width="100%" align=center></span></div><div><p class=MsoNormal style='margin-left:36.0pt'><b><span style='font-family:"Arial",sans-serif;color:black'>From: </span></b><span style='font-family:"Arial",sans-serif;color:black'>"BÖSCH Christian" <boesch@fhv.at><br><b>To: </b>"Kea-users@lists.isc.org" <kea-users@lists.isc.org><br><b>Sent: </b>Monday, 11 November, 2024 09:40:40<br><b>Subject: </b>Re: [Kea-users] error message<o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:36.0pt'><span style='font-family:"Arial",sans-serif;color:black'><o:p> </o:p></span></p></div><div><div><p class=MsoNormal style='margin-left:36.0pt'><span lang=EN-US style='color:black'>Hi Peter,</span><span style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:36.0pt'><span lang=EN-US style='color:black'> </span><span style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:36.0pt'><span lang=EN-US style='color:black'>Dhcp-socket-type is:</span><span style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:36.0pt'><span style='color:black'> "dhcp-socket-type": "udp"<o:p></o:p></span></p><p class=MsoNormal style='margin-left:36.0pt'><span lang=EN-US style='color:black'> </span><span style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:36.0pt'><span lang=EN-US style='color:black'>Kea is running as user “_kea”, installed on debian with the subscriber package from isc in version 2.6.1.</span><span style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:36.0pt'><span lang=EN-US style='color:black'>In general kea works, but some clients get this error.</span><span style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:36.0pt'><span lang=EN-US style='color:black'>I’ve shared the config in this thread on the email before to Darren.</span><span style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:36.0pt'><span lang=EN-US style='color:black'> </span><span style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:36.0pt'><span lang=EN-US style='color:black'>Best regards, Christian</span><span style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:36.0pt'><span lang=EN-US style='color:black'> </span><span style='color:black'><o:p></o:p></span></p><div id=mail-editor-reference-message-container><div><div><div><p class=MsoNormal style='margin-left:72.0pt'><span style='color:black'>On 10.11.24, 11:11, "Kea-users" <kea-users-bounces@lists.isc.org> wrote:<o:p></o:p></span></p></div><p class=MsoNormal style='margin-left:72.0pt'><span style='color:black'> <o:p></o:p></span></p><div><div><div><p class=MsoNormal style='margin-left:72.0pt'><span style='font-family:"Arial",sans-serif;color:black'>Hi Christian,</span><span style='color:black'><o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:72.0pt'><span style='font-family:"Arial",sans-serif;color:black'> What is the value of "dhcp-socket-type" in your "interfaces-config" definition?</span><span style='color:black'><o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:72.0pt'><span style='font-family:"Arial",sans-serif;color:black'> </span><span style='color:black'><o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:72.0pt'><span style='font-family:"Arial",sans-serif;color:black'>Also, what users are you running Kea as? If Kea is not run as root, there may be</span><span style='color:black'><o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:72.0pt'><span style='font-family:"Arial",sans-serif;color:black'>permissions issues.</span><span style='color:black'><o:p></o:p></span></p></div></div><div><p class=MsoNormal style='margin-left:72.0pt'><span style='font-family:"Arial",sans-serif;color:black'> </span><span style='color:black'><o:p></o:p></span></p></div></div></div></div></div></div><p class=MsoNormal style='margin-left:36.0pt'><span style='font-family:"Arial",sans-serif;color:black'><br>-- <br>ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.<br><br>To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.<br><br>Kea-users mailing list<br>Kea-users@lists.isc.org<br>https://lists.isc.org/mailman/listinfo/kea-users<o:p></o:p></span></p></div></div></div></div></div></div></body></html>