<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Aptos;
panose-1:2 11 0 4 2 2 2 2 2 4;}
@font-face
{font-family:"Times New Roman \(Body CS\)";
panose-1:2 11 6 4 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:10.0pt;
font-family:"Aptos",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style></head><body lang=en-AT link=blue vlink=purple style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal><span lang=EN-US style='font-size:12.0pt;mso-fareast-language:EN-US'>Hi Darren,<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:12.0pt;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:12.0pt;mso-fareast-language:EN-US'>There are about 380 different clients in 15 subnets in the log, and 12 of these clients have this error.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:12.0pt;mso-fareast-language:EN-US'>All of the clients with the error are in the same subnet.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:12.0pt;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:12.0pt;mso-fareast-language:EN-US'>Best regards, Christian<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:12.0pt;mso-fareast-language:EN-US'><o:p> </o:p></span></p><div id=mail-editor-reference-message-container><div><div><div><p class=MsoNormal style='margin-left:36.0pt'><span style='font-size:12.0pt'>On 12.11.24, 12:23, "Kea-users" <kea-users-bounces@lists.isc.org> wrote:<o:p></o:p></span></p></div><p class=MsoNormal style='margin-left:36.0pt'><span style='font-size:11.0pt'><o:p> </o:p></span></p><div><p class=MsoNormal style='margin-left:36.0pt'><span style='font-size:11.0pt'>Hi Christian,<br><br>Do other clients experience this permission denied or is it only this<br>single client?<br><br>Thank you,<br>Darren Ankney<br><br>On Mon, Nov 11, 2024 at 5:13</span><span style='font-size:11.0pt;font-family:"Arial",sans-serif'> </span><span style='font-size:11.0pt'>AM BÖSCH Christian <boesch@fhv.at> wrote:<br>><br>> Hi Peter,<br>><br>><br>><br>> All the dhcp requests are coming through a relay agent.<br>><br>> So the server isn’t in the same broadcast domain. Therefore I’ve configured dhcp-socket-type to “udp” as it’s mentioned in the documentation you posted below:<br>><br>> “Therefore, in deployments where the server does not need to provision the directly connected clients and only receives the unicast packets from the relay agents, the Kea server should be configured to use UDP sockets instead of raw sockets. “<br>><br>><br>><br>> BR, Christian<br>><br>><br>><br>> On 11.11.24, 10:39, "Kea-users" <kea-users-bounces@lists.isc.org> wrote:<br>><br>><br>><br>> Hi Christian,<br>><br>> The incoming request was from 172.21.11.104, and the lease request is for<br>><br>> 172.21.11.104.<br>><br>><br>><br>> I don't know what the request packet contains, but Kea tries to send the reply<br>><br>> to 255.255.255.255 - this is a Limited Scope Broadcast Address; unlike other<br>><br>> types of broadcasts, packets sent to 255.255.255.255 do not pass through routers.<br>><br>> Therefore, it's confined to the sender's local network segment.<br>><br>><br>><br>> If the client with mac address b8:27:eb:12:96:74 is located in the same broadcast<br>><br>> domain as the Kea server, you will need to define "dhcp-socket-type": "raw".<br>><br>><br>><br>> See: <a href="https://kea.readthedocs.io/en/kea-2.6.1/arm/dhcp4-srv.html#interface-configuration">https://kea.readthedocs.io/en/kea-2.6.1/arm/dhcp4-srv.html#interface-configuration</a><br>><br>><br>><br>> /Peter<br>><br>> ________________________________<br>><br>> From: "BÖSCH Christian" <boesch@fhv.at><br>> To: "Kea-users@lists.isc.org" <kea-users@lists.isc.org><br>> Sent: Monday, 11 November, 2024 09:40:40<br>> Subject: Re: [Kea-users] error message<br>><br>><br>><br>> Hi Peter,<br>><br>><br>><br>> Dhcp-socket-type is:<br>><br>> "dhcp-socket-type": "udp"<br>><br>><br>><br>> Kea is running as user “_kea”, installed on debian with the subscriber package from isc in version 2.6.1.<br>><br>> In general kea works, but some clients get this error.<br>><br>> I’ve shared the config in this thread on the email before to Darren.<br>><br>><br>><br>> Best regards, Christian<br>><br>><br>><br>> On 10.11.24, 11:11, "Kea-users" <kea-users-bounces@lists.isc.org> wrote:<br>><br>><br>><br>> Hi Christian,<br>><br>> What is the value of "dhcp-socket-type" in your "interfaces-config" definition?<br>><br>><br>><br>> Also, what users are you running Kea as? If Kea is not run as root, there may be<br>><br>> permissions issues.<br>><br>><br>><br>><br>> --<br>> ISC funds the development of this software with paid support subscriptions. Contact us at <a href="https://www.isc.org/contact/">https://www.isc.org/contact/</a> for more information.<br>><br>> To unsubscribe visit <a href="https://lists.isc.org/mailman/listinfo/kea-users">https://lists.isc.org/mailman/listinfo/kea-users</a>.<br>><br>> Kea-users mailing list<br>> Kea-users@lists.isc.org<br>> <a href="https://lists.isc.org/mailman/listinfo/kea-users">https://lists.isc.org/mailman/listinfo/kea-users</a><br>><br>> --<br>> ISC funds the development of this software with paid support subscriptions. Contact us at <a href="https://www.isc.org/contact/">https://www.isc.org/contact/</a> for more information.<br>><br>> To unsubscribe visit <a href="https://lists.isc.org/mailman/listinfo/kea-users">https://lists.isc.org/mailman/listinfo/kea-users</a>.<br>><br>> Kea-users mailing list<br>> Kea-users@lists.isc.org<br>> <a href="https://lists.isc.org/mailman/listinfo/kea-users">https://lists.isc.org/mailman/listinfo/kea-users</a><br>-- <br>ISC funds the development of this software with paid support subscriptions. Contact us at <a href="https://www.isc.org/contact/">https://www.isc.org/contact/</a> for more information.<br><br>To unsubscribe visit <a href="https://lists.isc.org/mailman/listinfo/kea-users">https://lists.isc.org/mailman/listinfo/kea-users</a>.<br><br>Kea-users mailing list<br>Kea-users@lists.isc.org<br><a href="https://lists.isc.org/mailman/listinfo/kea-users">https://lists.isc.org/mailman/listinfo/kea-users</a><o:p></o:p></span></p></div></div></div></div></div></body></html>