My (limited) understanding is that it should not send a NAK unless you have told the server that it is authoritative. See https://kea.readthedocs.io/en/kea-1.6.2/arm/dhcp4-srv.html#authoritative-dhcpv4-server-behavior.
If I’m reading this correctly you would need to remove any authoritative directive or replace it with a value of false. As long as you don’t have any pools, it should then only respond to machines with known MACs. From: Kea-users <[email protected]> On Behalf Of Mark Moseley Sent: Tuesday, 8 June 2021 8:41 AM To: [email protected] Subject: [Kea-users] Ignore non-reserved hosts I've been scouring the manual and google for this but have finally reached the point of giving up and bugging the list :) I'm trying to migrate our DHCP from dhcpd to Kea. I've got an existing DHCP server that it will need to live alongside Kea for a little bit. Server is Ubuntu Focal, with Kea 1.8.2, with mysql host reservation backend. I've been trying to figure out how to tell Kea to ignore any hosts that don't appear in the host reservation. I.e. I want Kea to only respond to DHCP requests from MAC addresses that I have configured in the Kea MySQL 'hosts' table. Currently, Kea is churning out a steady stream of DHCP NAK's to the non-reserved hosts (which are 'reserved' on the legacy dhcpd server but will eventually be migrated to Kea), when those hosts renew their lease. I'd like Kea to silently drop the unrecognized DHCP requests. I think this would be the equivalent of dhcpd's "deny unknown-clients". keama didn't know what to do with that directive (it created a 'statement' clause that kea-dhcpd4 did not recognize). Is it doable/possible to configure Kea to ignore any hosts that don't appear in the host reservations? Thanks!
_______________________________________________ ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users. Kea-users mailing list [email protected] https://lists.isc.org/mailman/listinfo/kea-users
