Re: [Kea-users] dhcp6 address assignment

2022-10-20 Thread Veronique.Lefebure
I have tested that as well, and indeed the IP is allocated to the client even 
if unusable.

> On 19/10/2022 19:49 Marek Greško via Kea-users  
> wrote:
> 
>  
> Hmm, I would expect reservations are not offered if not within the subnet.
> 
> M.
> 
> 
> 
> 
> 
> Sent with Proton Mail secure email.
> 
> --- Original Message ---
> On Wednesday, October 19th, 2022 at 19:12, perl-list  
> wrote:
> 
> 
> > 
> > - Original Message -
> > 
> > > From: "Marek Greško via Kea-users" kea-users@lists.isc.org
> > > To: "Dan Oachs" doa...@gac.edu
> > > Cc: "kea-users" kea-users@lists.isc.org
> > > Sent: Wednesday, October 19, 2022 12:59:56 PM
> > > Subject: Re: [Kea-users] dhcp6 address assignment
> > 
> > > Hello,
> > 
> > > I run into another problems with this. To simplify the migration I use 
> > > global
> > > reservations. I have two definitions for that machine. One for ethernet 
> > > adapter
> > > and one for wifi adapter. Unfortunately the DUID is the same with both
> > > interfaces so the kea-dhcp6 cannot start with that configuration. ISC 
> > > DHCPD6
> > > hed no problem with that and everything was working correctly. It was 
> > > because I
> > > was able to define both mac address and duid. Since I defined different 
> > > value
> > > for mac for wifi there was no conflict.
> > 
> > > Probably the only one solution for this is to drop global reservations and
> > > switch to per subnet reservations?
> > 
> > 
> > It would seem it is best to not use global reservations in your scenario:
> > 
> > "This feature can be used to assign certain parameters, such as hostname or 
> > other dedicated, host-specific options. It can also be used to assign 
> > addresses or prefixes. However, global reservations that assign either of 
> > these bypass the whole topology determination provided by the DHCP logic 
> > implemented in Kea. It is very easy to misuse this feature and get a 
> > configuration that is inconsistent. To give a specific example, imagine a 
> > global reservation for the address 2001:db8:::1 and two subnets 
> > 2001:db8:::/48 and 2001:db8:::/48. If global reservations are used 
> > in both subnets and a device matching global host reservations visits part 
> > of the network that is covered by 2001:db8:::/48, it will get the IP 
> > address 2001:db8:::1, which is outside of the prefix announced by its 
> > local router using router advertisements. Such a configuration is unusable 
> > or, at the very least, riddled with issues, such as downlink traffic not 
> > reaching the device."
> > 
> > https://kea.readthedocs.io/en/kea-2.2.0/arm/dhcp6-srv.html?highlight=global 
> > reservation#global-reservations-in-dhcpv6
> > 
> > > Thanks
> > 
> > > Marek
> > 
> > > --- Original Message ---
> > > On Tuesday, October 18th, 2022 at 20:48, Dan Oachs doa...@gac.edu wrote:
> > 
> > > > Have you looked at using multiple reservations for the same IP? Would 
> > > > that solve
> > > > any of your issues?
> > 
> > > > [
> > > > https://kea.readthedocs.io/en/latest/arm/dhcp6-srv.html?highlight=unique#multiple-reservations-for-the-same-ip
> > > > |
> > > > https://kea.readthedocs.io/en/latest/arm/dhcp6-srv.html?highlight=unique#multiple-reservations-for-the-same-ip
> > > > ]
> > 
> > > > --Dan
> > 
> > > > On Tue, Oct 18, 2022 at 1:15 PM Marek Greško via Kea-users < [
> > > > mailto:kea-users@lists.isc.org | kea-users@lists.isc.org ] > wrote:
> > 
> > > > > Hello,
> > 
> > > > > I am in a phase of migration ISC DHCPD into kea and I am suffering 
> > > > > several
> > > > > problems in ipv6 address assignment.
> > 
> > > > > 1. I used to assign same ipv6 address for the same machine which was 
> > > > > dial boot
> > > > > linux/windows. It was possible by assigning same ipv6 address to both 
> > > > > DUIDs
> > > > > before. But in kea this is not allowed. I found out there is a 
> > > > > possibility to
> > > > > assign ipv6 address by MAC address which was not possible in ISC 
> > > > > DHCPD. I was
> > > > > very happy with that finding but fallen into second problem.
> > > > > 2. The windows

Re: [Kea-users] dhcp6 address assignment

2022-10-20 Thread Marek Greško via Kea-users
Hello,

unfortunately it seems this option does not solve the issue. It helps me to run 
dhcp6 and stop failing immediately, but it then fails on reservations. For 
example when I boot to linux it assigns ipv6 address honoring the reservation, 
but it also creates a lease. When I reboot to linux I get ipv6 address from the 
pool assigned since it thinks the reservation is not possible, since the lease 
exists.

Is there some possibility to either not crating leases for reservations or 
strictly honor reservations even when lease exists and overwrite it?

Thanks

Marek

--- Original Message ---
On Tuesday, October 18th, 2022 at 20:48, Dan Oachs  wrote:

> Have you looked at using multiple reservations for the same IP? Would that 
> solve any of your issues?
>
> https://kea.readthedocs.io/en/latest/arm/dhcp6-srv.html?highlight=unique#multiple-reservations-for-the-same-ip
>
> --Dan
>
> On Tue, Oct 18, 2022 at 1:15 PM Marek Greško via Kea-users 
>  wrote:
>
>> Hello,
>>
>> I am in a phase of migration ISC DHCPD into kea and I am suffering several 
>> problems in ipv6 address assignment.
>>
>> - I used to assign same ipv6 address for the same machine which was dial 
>> boot linux/windows. It was possible by assigning same ipv6 address to both 
>> DUIDs before. But in kea this is not allowed. I found out there is a 
>> possibility to assign ipv6 address by MAC address which was not possible in 
>> ISC DHCPD. I was very happy with that finding but fallen into second problem.
>> - The windows machine got 2 interfaces ethernet and wifi. I configured kea 
>> to assign one ipv6 address to the ethernet adapter and another one to the 
>> wifi adapter. But after investigating logs kea was receiving dhcp6 request 
>> over wifi using the ethernet adapter mac address. How is this possible? Is 
>> it possible the MAC address in DHCP does not match L2 MAC address? I did not 
>> sniff the request, yet. I decided to switch back to DUID assignment since 
>> this problem is worse than the previous.
>> - Maybe it would be possible to overcome the above problems if kea is able 
>> to match both DUID and MAC address, but it is not allowed in kea. I am ought 
>> to select one option only. Why?
>>
>> Thanks
>>
>> Marek
>>
>> Thanks
>>
>> Marek
>>
>> --
>> ISC funds the development of this software with paid support subscriptions. 
>> Contact us at https://www.isc.org/contact/ for more information.
>>
>> To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.
>>
>> Kea-users mailing list
>> Kea-users@lists.isc.org
>> https://lists.isc.org/mailman/listinfo/kea-users-- 
ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.

To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.

Kea-users mailing list
Kea-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/kea-users


Re: [Kea-users] dhcp6 address assignment

2022-10-19 Thread Dan Oachs
I'm guessing you might need to use the flex_id hook library and define a
flex-id to make that work?  Though I don't really know as I have not looked
into using the flex_id hook library myself.

--Dan


On Wed, Oct 19, 2022 at 4:09 PM Marek Greško via Kea-users <
kea-users@lists.isc.org> wrote:

> Hello,
>
> I have one more question on that topic. I have one client having both
> ethernet and wifi interface in the same vlan/subnet. I want to assign ipv6
> address to both of them. Is it possible to differentiate by both duid and
> iaid?
>
> Thanks
>
> Marek
>
>
>
>
>
> Sent with Proton Mail secure email.
>
> --- Original Message ---
> On Wednesday, October 19th, 2022 at 19:12, perl-list <
> perl-l...@network1.net> wrote:
>
>
> >
> > - Original Message -
> >
> > > From: "Marek Greško via Kea-users" kea-users@lists.isc.org
> > > To: "Dan Oachs" doa...@gac.edu
> > > Cc: "kea-users" kea-users@lists.isc.org
> > > Sent: Wednesday, October 19, 2022 12:59:56 PM
> > > Subject: Re: [Kea-users] dhcp6 address assignment
> >
> > > Hello,
> >
> > > I run into another problems with this. To simplify the migration I use
> global
> > > reservations. I have two definitions for that machine. One for
> ethernet adapter
> > > and one for wifi adapter. Unfortunately the DUID is the same with both
> > > interfaces so the kea-dhcp6 cannot start with that configuration. ISC
> DHCPD6
> > > hed no problem with that and everything was working correctly. It was
> because I
> > > was able to define both mac address and duid. Since I defined
> different value
> > > for mac for wifi there was no conflict.
> >
> > > Probably the only one solution for this is to drop global reservations
> and
> > > switch to per subnet reservations?
> >
> >
> > It would seem it is best to not use global reservations in your scenario:
> >
> > "This feature can be used to assign certain parameters, such as hostname
> or other dedicated, host-specific options. It can also be used to assign
> addresses or prefixes. However, global reservations that assign either of
> these bypass the whole topology determination provided by the DHCP logic
> implemented in Kea. It is very easy to misuse this feature and get a
> configuration that is inconsistent. To give a specific example, imagine a
> global reservation for the address 2001:db8:::1 and two subnets
> 2001:db8:::/48 and 2001:db8:::/48. If global reservations are used
> in both subnets and a device matching global host reservations visits part
> of the network that is covered by 2001:db8:::/48, it will get the IP
> address 2001:db8:::1, which is outside of the prefix announced by its
> local router using router advertisements. Such a configuration is unusable
> or, at the very least, riddled with issues, such as downlink traffic not
> reaching the device."
> >
> >
> https://kea.readthedocs.io/en/kea-2.2.0/arm/dhcp6-srv.html?highlight=global
> reservation#global-reservations-in-dhcpv6
> >
> > > Thanks
> >
> > > Marek
> >
> > > --- Original Message ---
> > > On Tuesday, October 18th, 2022 at 20:48, Dan Oachs doa...@gac.edu
> wrote:
> >
> > > > Have you looked at using multiple reservations for the same IP?
> Would that solve
> > > > any of your issues?
> >
> > > > [
> > > >
> https://kea.readthedocs.io/en/latest/arm/dhcp6-srv.html?highlight=unique#multiple-reservations-for-the-same-ip
> > > > |
> > > >
> https://kea.readthedocs.io/en/latest/arm/dhcp6-srv.html?highlight=unique#multiple-reservations-for-the-same-ip
> > > > ]
> >
> > > > --Dan
> >
> > > > On Tue, Oct 18, 2022 at 1:15 PM Marek Greško via Kea-users < [
> > > > mailto:kea-users@lists.isc.org | kea-users@lists.isc.org ] > wrote:
> >
> > > > > Hello,
> >
> > > > > I am in a phase of migration ISC DHCPD into kea and I am suffering
> several
> > > > > problems in ipv6 address assignment.
> >
> > > > > 1. I used to assign same ipv6 address for the same machine which
> was dial boot
> > > > > linux/windows. It was possible by assigning same ipv6 address to
> both DUIDs
> > > > > before. But in kea this is not allowed. I found out there is a
> possibility to
> > > > > assign ipv6 address by MAC address which was not possible in ISC
> DHCPD. I was
> > > > > very

Re: [Kea-users] dhcp6 address assignment

2022-10-19 Thread Marek Greško via Kea-users
Hello,

I have one more question on that topic. I have one client having both ethernet 
and wifi interface in the same vlan/subnet. I want to assign ipv6 address to 
both of them. Is it possible to differentiate by both duid and iaid?

Thanks

Marek





Sent with Proton Mail secure email.

--- Original Message ---
On Wednesday, October 19th, 2022 at 19:12, perl-list  
wrote:


> 
> - Original Message -
> 
> > From: "Marek Greško via Kea-users" kea-users@lists.isc.org
> > To: "Dan Oachs" doa...@gac.edu
> > Cc: "kea-users" kea-users@lists.isc.org
> > Sent: Wednesday, October 19, 2022 12:59:56 PM
> > Subject: Re: [Kea-users] dhcp6 address assignment
> 
> > Hello,
> 
> > I run into another problems with this. To simplify the migration I use 
> > global
> > reservations. I have two definitions for that machine. One for ethernet 
> > adapter
> > and one for wifi adapter. Unfortunately the DUID is the same with both
> > interfaces so the kea-dhcp6 cannot start with that configuration. ISC DHCPD6
> > hed no problem with that and everything was working correctly. It was 
> > because I
> > was able to define both mac address and duid. Since I defined different 
> > value
> > for mac for wifi there was no conflict.
> 
> > Probably the only one solution for this is to drop global reservations and
> > switch to per subnet reservations?
> 
> 
> It would seem it is best to not use global reservations in your scenario:
> 
> "This feature can be used to assign certain parameters, such as hostname or 
> other dedicated, host-specific options. It can also be used to assign 
> addresses or prefixes. However, global reservations that assign either of 
> these bypass the whole topology determination provided by the DHCP logic 
> implemented in Kea. It is very easy to misuse this feature and get a 
> configuration that is inconsistent. To give a specific example, imagine a 
> global reservation for the address 2001:db8:::1 and two subnets 
> 2001:db8:::/48 and 2001:db8:::/48. If global reservations are used in 
> both subnets and a device matching global host reservations visits part of 
> the network that is covered by 2001:db8:::/48, it will get the IP address 
> 2001:db8:::1, which is outside of the prefix announced by its local 
> router using router advertisements. Such a configuration is unusable or, at 
> the very least, riddled with issues, such as downlink traffic not reaching 
> the device."
> 
> https://kea.readthedocs.io/en/kea-2.2.0/arm/dhcp6-srv.html?highlight=global 
> reservation#global-reservations-in-dhcpv6
> 
> > Thanks
> 
> > Marek
> 
> > --- Original Message ---
> > On Tuesday, October 18th, 2022 at 20:48, Dan Oachs doa...@gac.edu wrote:
> 
> > > Have you looked at using multiple reservations for the same IP? Would 
> > > that solve
> > > any of your issues?
> 
> > > [
> > > https://kea.readthedocs.io/en/latest/arm/dhcp6-srv.html?highlight=unique#multiple-reservations-for-the-same-ip
> > > |
> > > https://kea.readthedocs.io/en/latest/arm/dhcp6-srv.html?highlight=unique#multiple-reservations-for-the-same-ip
> > > ]
> 
> > > --Dan
> 
> > > On Tue, Oct 18, 2022 at 1:15 PM Marek Greško via Kea-users < [
> > > mailto:kea-users@lists.isc.org | kea-users@lists.isc.org ] > wrote:
> 
> > > > Hello,
> 
> > > > I am in a phase of migration ISC DHCPD into kea and I am suffering 
> > > > several
> > > > problems in ipv6 address assignment.
> 
> > > > 1. I used to assign same ipv6 address for the same machine which was 
> > > > dial boot
> > > > linux/windows. It was possible by assigning same ipv6 address to both 
> > > > DUIDs
> > > > before. But in kea this is not allowed. I found out there is a 
> > > > possibility to
> > > > assign ipv6 address by MAC address which was not possible in ISC DHCPD. 
> > > > I was
> > > > very happy with that finding but fallen into second problem.
> > > > 2. The windows machine got 2 interfaces ethernet and wifi. I configured 
> > > > kea to
> > > > assign one ipv6 address to the ethernet adapter and another one to the 
> > > > wifi
> > > > adapter. But after investigating logs kea was receiving dhcp6 request 
> > > > over wifi
> > > > using the ethernet adapter mac address. How is this possible? Is it 
> > > > possible
> > > > the MAC address in DHCP does not match L2 MAC addre

Re: [Kea-users] dhcp6 address assignment

2022-10-19 Thread Marek Greško via Kea-users
Hmm, I would expect reservations are not offered if not within the subnet.

M.





Sent with Proton Mail secure email.

--- Original Message ---
On Wednesday, October 19th, 2022 at 19:12, perl-list  
wrote:


> 
> - Original Message -
> 
> > From: "Marek Greško via Kea-users" kea-users@lists.isc.org
> > To: "Dan Oachs" doa...@gac.edu
> > Cc: "kea-users" kea-users@lists.isc.org
> > Sent: Wednesday, October 19, 2022 12:59:56 PM
> > Subject: Re: [Kea-users] dhcp6 address assignment
> 
> > Hello,
> 
> > I run into another problems with this. To simplify the migration I use 
> > global
> > reservations. I have two definitions for that machine. One for ethernet 
> > adapter
> > and one for wifi adapter. Unfortunately the DUID is the same with both
> > interfaces so the kea-dhcp6 cannot start with that configuration. ISC DHCPD6
> > hed no problem with that and everything was working correctly. It was 
> > because I
> > was able to define both mac address and duid. Since I defined different 
> > value
> > for mac for wifi there was no conflict.
> 
> > Probably the only one solution for this is to drop global reservations and
> > switch to per subnet reservations?
> 
> 
> It would seem it is best to not use global reservations in your scenario:
> 
> "This feature can be used to assign certain parameters, such as hostname or 
> other dedicated, host-specific options. It can also be used to assign 
> addresses or prefixes. However, global reservations that assign either of 
> these bypass the whole topology determination provided by the DHCP logic 
> implemented in Kea. It is very easy to misuse this feature and get a 
> configuration that is inconsistent. To give a specific example, imagine a 
> global reservation for the address 2001:db8:::1 and two subnets 
> 2001:db8:::/48 and 2001:db8:::/48. If global reservations are used in 
> both subnets and a device matching global host reservations visits part of 
> the network that is covered by 2001:db8:::/48, it will get the IP address 
> 2001:db8:::1, which is outside of the prefix announced by its local 
> router using router advertisements. Such a configuration is unusable or, at 
> the very least, riddled with issues, such as downlink traffic not reaching 
> the device."
> 
> https://kea.readthedocs.io/en/kea-2.2.0/arm/dhcp6-srv.html?highlight=global 
> reservation#global-reservations-in-dhcpv6
> 
> > Thanks
> 
> > Marek
> 
> > --- Original Message ---
> > On Tuesday, October 18th, 2022 at 20:48, Dan Oachs doa...@gac.edu wrote:
> 
> > > Have you looked at using multiple reservations for the same IP? Would 
> > > that solve
> > > any of your issues?
> 
> > > [
> > > https://kea.readthedocs.io/en/latest/arm/dhcp6-srv.html?highlight=unique#multiple-reservations-for-the-same-ip
> > > |
> > > https://kea.readthedocs.io/en/latest/arm/dhcp6-srv.html?highlight=unique#multiple-reservations-for-the-same-ip
> > > ]
> 
> > > --Dan
> 
> > > On Tue, Oct 18, 2022 at 1:15 PM Marek Greško via Kea-users < [
> > > mailto:kea-users@lists.isc.org | kea-users@lists.isc.org ] > wrote:
> 
> > > > Hello,
> 
> > > > I am in a phase of migration ISC DHCPD into kea and I am suffering 
> > > > several
> > > > problems in ipv6 address assignment.
> 
> > > > 1. I used to assign same ipv6 address for the same machine which was 
> > > > dial boot
> > > > linux/windows. It was possible by assigning same ipv6 address to both 
> > > > DUIDs
> > > > before. But in kea this is not allowed. I found out there is a 
> > > > possibility to
> > > > assign ipv6 address by MAC address which was not possible in ISC DHCPD. 
> > > > I was
> > > > very happy with that finding but fallen into second problem.
> > > > 2. The windows machine got 2 interfaces ethernet and wifi. I configured 
> > > > kea to
> > > > assign one ipv6 address to the ethernet adapter and another one to the 
> > > > wifi
> > > > adapter. But after investigating logs kea was receiving dhcp6 request 
> > > > over wifi
> > > > using the ethernet adapter mac address. How is this possible? Is it 
> > > > possible
> > > > the MAC address in DHCP does not match L2 MAC address? I did not sniff 
> > > > the
> > > > request, yet. I decided to switch back to DUID assignment since this 
> > > > problem is
> > > >

Re: [Kea-users] dhcp6 address assignment

2022-10-19 Thread perl-list


- Original Message -
> From: "Marek Greško via Kea-users" 
> To: "Dan Oachs" 
> Cc: "kea-users" 
> Sent: Wednesday, October 19, 2022 12:59:56 PM
> Subject: Re: [Kea-users] dhcp6 address assignment

> Hello,

> I run into another problems with this. To simplify the migration I use global
> reservations. I have two definitions for that machine. One for ethernet 
> adapter
> and one for wifi adapter. Unfortunately the DUID is the same with both
> interfaces so the kea-dhcp6 cannot start with that configuration. ISC DHCPD6
> hed no problem with that and everything was working correctly. It was because 
> I
> was able to define both mac address and duid. Since I defined different value
> for mac for wifi there was no conflict.

> Probably the only one solution for this is to drop global reservations and
> switch to per subnet reservations?

It would seem it is best to not use global reservations in your scenario:

"This feature can be used to assign certain parameters, such as hostname or 
other dedicated, host-specific options. It can also be used to assign addresses 
or prefixes. However, global reservations that assign either of these bypass 
the whole topology determination provided by the DHCP logic implemented in Kea. 
It is very easy to misuse this feature and get a configuration that is 
inconsistent. To give a specific example, imagine a global reservation for the 
address 2001:db8:::1 and two subnets 2001:db8:::/48 and 
2001:db8:::/48. If global reservations are used in both subnets and a 
device matching global host reservations visits part of the network that is 
covered by 2001:db8:::/48, it will get the IP address 2001:db8:::1, 
which is outside of the prefix announced by its local router using router 
advertisements. Such a configuration is unusable or, at the very least, riddled 
with issues, such as downlink traffic not reaching the device."

https://kea.readthedocs.io/en/kea-2.2.0/arm/dhcp6-srv.html?highlight=global%20reservation#global-reservations-in-dhcpv6


> Thanks

> Marek

> --- Original Message ---
> On Tuesday, October 18th, 2022 at 20:48, Dan Oachs  wrote:

>> Have you looked at using multiple reservations for the same IP? Would that 
>> solve
>> any of your issues?

>> [
>> https://kea.readthedocs.io/en/latest/arm/dhcp6-srv.html?highlight=unique#multiple-reservations-for-the-same-ip
>> |
>> https://kea.readthedocs.io/en/latest/arm/dhcp6-srv.html?highlight=unique#multiple-reservations-for-the-same-ip
>> ]

>> --Dan

>> On Tue, Oct 18, 2022 at 1:15 PM Marek Greško via Kea-users < [
>> mailto:kea-users@lists.isc.org | kea-users@lists.isc.org ] > wrote:

>>> Hello,

>>> I am in a phase of migration ISC DHCPD into kea and I am suffering several
>>> problems in ipv6 address assignment.

>>>1. I used to assign same ipv6 address for the same machine which was 
>>> dial boot
>>>linux/windows. It was possible by assigning same ipv6 address to both 
>>> DUIDs
>>>before. But in kea this is not allowed. I found out there is a 
>>> possibility to
>>>assign ipv6 address by MAC address which was not possible in ISC DHCPD. 
>>> I was
>>> very happy with that finding but fallen into second problem.
>>>2. The windows machine got 2 interfaces ethernet and wifi. I configured 
>>> kea to
>>>assign one ipv6 address to the ethernet adapter and another one to the 
>>> wifi
>>>adapter. But after investigating logs kea was receiving dhcp6 request 
>>> over wifi
>>>using the ethernet adapter mac address. How is this possible? Is it 
>>> possible
>>>the MAC address in DHCP does not match L2 MAC address? I did not sniff 
>>> the
>>>request, yet. I decided to switch back to DUID assignment since this 
>>> problem is
>>> worse than the previous.
>>>3. Maybe it would be possible to overcome the above problems if kea is 
>>> able to
>>>match both DUID and MAC address, but it is not allowed in kea. I am 
>>> ought to
>>> select one option only. Why?

>>> Thanks

>>> Marek

>>> Thanks

>>> Marek

>>> --
>>> ISC funds the development of this software with paid support subscriptions.
>>> Contact us at [ https://www.isc.org/contact/ | https://www.isc.org/contact/ 
>>> ]
>>> for more information.

>>> To unsubscribe visit [ https://lists.isc.org/mailman/listinfo/kea-users |
>>> https://lists.isc.org/mailman/listinfo/kea-users ] .

>>> Kea-users mailing list
>>> [ m

Re: [Kea-users] dhcp6 address assignment

2022-10-19 Thread Marek Greško via Kea-users
Hello,

I run into another problems with this. To simplify the migration I use global 
reservations. I have two definitions for that machine. One for ethernet adapter 
and one for wifi adapter. Unfortunately the DUID is the same with both 
interfaces so the kea-dhcp6 cannot start with that configuration. ISC DHCPD6 
hed no problem with that and everything was working correctly. It was because I 
was able to define both mac address and duid. Since I defined different value 
for mac for wifi there was no conflict.

Probably the only one solution for this is to drop global reservations and 
switch to per subnet reservations?

Thanks

Marek

--- Original Message ---
On Tuesday, October 18th, 2022 at 20:48, Dan Oachs  wrote:

> Have you looked at using multiple reservations for the same IP? Would that 
> solve any of your issues?
>
> https://kea.readthedocs.io/en/latest/arm/dhcp6-srv.html?highlight=unique#multiple-reservations-for-the-same-ip
>
> --Dan
>
> On Tue, Oct 18, 2022 at 1:15 PM Marek Greško via Kea-users 
>  wrote:
>
>> Hello,
>>
>> I am in a phase of migration ISC DHCPD into kea and I am suffering several 
>> problems in ipv6 address assignment.
>>
>> - I used to assign same ipv6 address for the same machine which was dial 
>> boot linux/windows. It was possible by assigning same ipv6 address to both 
>> DUIDs before. But in kea this is not allowed. I found out there is a 
>> possibility to assign ipv6 address by MAC address which was not possible in 
>> ISC DHCPD. I was very happy with that finding but fallen into second problem.
>> - The windows machine got 2 interfaces ethernet and wifi. I configured kea 
>> to assign one ipv6 address to the ethernet adapter and another one to the 
>> wifi adapter. But after investigating logs kea was receiving dhcp6 request 
>> over wifi using the ethernet adapter mac address. How is this possible? Is 
>> it possible the MAC address in DHCP does not match L2 MAC address? I did not 
>> sniff the request, yet. I decided to switch back to DUID assignment since 
>> this problem is worse than the previous.
>> - Maybe it would be possible to overcome the above problems if kea is able 
>> to match both DUID and MAC address, but it is not allowed in kea. I am ought 
>> to select one option only. Why?
>>
>> Thanks
>>
>> Marek
>>
>> Thanks
>>
>> Marek
>>
>> --
>> ISC funds the development of this software with paid support subscriptions. 
>> Contact us at https://www.isc.org/contact/ for more information.
>>
>> To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.
>>
>> Kea-users mailing list
>> Kea-users@lists.isc.org
>> https://lists.isc.org/mailman/listinfo/kea-users-- 
ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.

To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.

Kea-users mailing list
Kea-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/kea-users


Re: [Kea-users] dhcp6 address assignment

2022-10-19 Thread Marek Greško via Kea-users
This seems promising. I will test it.

Thanks

Marek

--- Original Message ---
On Tuesday, October 18th, 2022 at 20:48, Dan Oachs  wrote:

> Have you looked at using multiple reservations for the same IP? Would that 
> solve any of your issues?
>
> https://kea.readthedocs.io/en/latest/arm/dhcp6-srv.html?highlight=unique#multiple-reservations-for-the-same-ip
>
> --Dan
>
> On Tue, Oct 18, 2022 at 1:15 PM Marek Greško via Kea-users 
>  wrote:
>
>> Hello,
>>
>> I am in a phase of migration ISC DHCPD into kea and I am suffering several 
>> problems in ipv6 address assignment.
>>
>> - I used to assign same ipv6 address for the same machine which was dial 
>> boot linux/windows. It was possible by assigning same ipv6 address to both 
>> DUIDs before. But in kea this is not allowed. I found out there is a 
>> possibility to assign ipv6 address by MAC address which was not possible in 
>> ISC DHCPD. I was very happy with that finding but fallen into second problem.
>> - The windows machine got 2 interfaces ethernet and wifi. I configured kea 
>> to assign one ipv6 address to the ethernet adapter and another one to the 
>> wifi adapter. But after investigating logs kea was receiving dhcp6 request 
>> over wifi using the ethernet adapter mac address. How is this possible? Is 
>> it possible the MAC address in DHCP does not match L2 MAC address? I did not 
>> sniff the request, yet. I decided to switch back to DUID assignment since 
>> this problem is worse than the previous.
>> - Maybe it would be possible to overcome the above problems if kea is able 
>> to match both DUID and MAC address, but it is not allowed in kea. I am ought 
>> to select one option only. Why?
>>
>> Thanks
>>
>> Marek
>>
>> Thanks
>>
>> Marek
>>
>> --
>> ISC funds the development of this software with paid support subscriptions. 
>> Contact us at https://www.isc.org/contact/ for more information.
>>
>> To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.
>>
>> Kea-users mailing list
>> Kea-users@lists.isc.org
>> https://lists.isc.org/mailman/listinfo/kea-users-- 
ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.

To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.

Kea-users mailing list
Kea-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/kea-users


Re: [Kea-users] dhcp6 address assignment

2022-10-18 Thread Dan Oachs
Have you looked at using multiple reservations for the same IP?  Would that
solve any of your issues?

https://kea.readthedocs.io/en/latest/arm/dhcp6-srv.html?highlight=unique#multiple-reservations-for-the-same-ip

--Dan


On Tue, Oct 18, 2022 at 1:15 PM Marek Greško via Kea-users <
kea-users@lists.isc.org> wrote:

> Hello,
>
> I am in a phase of migration ISC DHCPD into kea and I am suffering several
> problems in ipv6 address assignment.
>
>
>1. I used to assign same ipv6 address for the same machine which was
>dial boot linux/windows. It was possible by assigning same ipv6 address to
>both DUIDs before. But in kea this is not allowed. I found out there is a
>possibility to assign ipv6 address by MAC address which was not possible in
>ISC DHCPD. I was very happy with that finding but fallen into second
>problem.
>2. The windows machine got 2 interfaces ethernet and wifi. I
>configured kea to assign one ipv6 address to the ethernet adapter and
>another one to the wifi adapter. But after investigating logs kea was
>receiving dhcp6 request over wifi using the ethernet adapter mac address.
>How is this possible? Is it possible the MAC address in DHCP does not match
>L2 MAC address? I did not sniff the request, yet. I decided to switch back
>to DUID assignment since this problem is worse than the previous.
>3. Maybe it would be possible to overcome the above problems if kea is
>able to match both DUID and MAC address, but it is not allowed in kea. I am
>ought to select one option only. Why?
>
>
> Thanks
>
> Marek
>
>
> Thanks
>
> Marek
>
>
> --
> ISC funds the development of this software with paid support
> subscriptions. Contact us at https://www.isc.org/contact/ for more
> information.
>
> To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.
>
> Kea-users mailing list
> Kea-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/kea-users
>
-- 
ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.

To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.

Kea-users mailing list
Kea-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/kea-users


Re: [Kea-users] dhcp6 address assignment

2022-10-18 Thread perl-list


>1. I used to assign same ipv6 address for the same machine which was dial 
> boot
>linux/windows. It was possible by assigning same ipv6 address to both DUIDs
>before. But in kea this is not allowed. I found out there is a possibility 
> to
>assign ipv6 address by MAC address which was not possible in ISC DHCPD. I 
> was
> very happy with that finding but fallen into second problem.


You could make a client class 
(https://kea.readthedocs.io/en/latest/arm/dhcp6-srv.html#reserving-client-classes-in-dhcpv6)
 for each dual booting client with both duids in the class.

Then make very tiny pools with only one address assigned to those classes

I think the below should work.


"client-classes": [
  {
"name": "WINDOWS1",
"test": "(substring(option[1].hex,0,all) == 0x000203090505149182b5fb4c) or 
(substring(option[1].hex,0,all) == 0x0001000126ffbc3f001c42bdc36c)"
  },
  {
"name": "WINDOWS2",
"test": "(substring(option[1].hex,0,all) == 0x0001000116c3c001) or 
(substring(option[1].hex,0,all) == 0x0001000116c3c001)"
  }
],


"subnet6": [
  {

"subnet": "2001:db8:2e50:e8::/64",
"pools": [
  {
"pool": "2001:db8:2e50:e8::1-2001:db8:2e50:e8::1",
"client-class": "WINDOWS1"
  },
  {
"pool": "2001:db8:2e50:e8::2-2001:db8:2e50:e8::2",
"client-class": "WINDOWS2"
  }
],


>2. The windows machine got 2 interfaces ethernet and wifi. I configured 
> kea to
>assign one ipv6 address to the ethernet adapter and another one to the wifi
>adapter. But after investigating logs kea was receiving dhcp6 request over 
> wifi
>using the ethernet adapter mac address. How is this possible? Is it 
> possible
>the MAC address in DHCP does not match L2 MAC address? I did not sniff the
>request, yet. I decided to switch back to DUID assignment since this 
> problem is
> worse than the previous.

This is likely because Kea is deriving the MAC address from the DUID (assuming 
the traffic was relayed).  The windows machine will most likely use the same 
DUID for all interfaces (at least it is supposed to or allowed to - I'd have to 
go review the RFC again to be sure).

-- 
ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.

To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.

Kea-users mailing list
Kea-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/kea-users


Re: [Kea-users] dhcp6 address assignment

2022-10-18 Thread Dan Oachs
I have recently learned that it is normal and expected that the DUID may
contain the MAC address of a different network device.  For example, an
Apple laptop ( that has only wifi ) will generate its DUID the first time
it boots and use that DUID for everything.  Wifi, usb-ethernet dongle, etc.

Windows has its own way of generating a DUID.  And on Linux, most distro's
will use a DUID but you can change a config file to have it use a link
local address instead.

While this info does not directly solve your problems, hopefully it helps
you understand how things are working.

The short answer is that you might need to rethink the way you use DHCP
(v6) on your network.  I know I have been struggling with some of the
differences making it difficult or impossible to do things the way we had
in the past.  For example, we can no longer assume a usb to ethernet
adapter will have a specific IPv6 address assigned to it, the address might
change depending on what host it is connected to :(


Thanks,
  Dan Oachs



On Tue, Oct 18, 2022 at 1:15 PM Marek Greško via Kea-users <
kea-users@lists.isc.org> wrote:

> Hello,
>
> I am in a phase of migration ISC DHCPD into kea and I am suffering several
> problems in ipv6 address assignment.
>
>
>1. I used to assign same ipv6 address for the same machine which was
>dial boot linux/windows. It was possible by assigning same ipv6 address to
>both DUIDs before. But in kea this is not allowed. I found out there is a
>possibility to assign ipv6 address by MAC address which was not possible in
>ISC DHCPD. I was very happy with that finding but fallen into second
>problem.
>2. The windows machine got 2 interfaces ethernet and wifi. I
>configured kea to assign one ipv6 address to the ethernet adapter and
>another one to the wifi adapter. But after investigating logs kea was
>receiving dhcp6 request over wifi using the ethernet adapter mac address.
>How is this possible? Is it possible the MAC address in DHCP does not match
>L2 MAC address? I did not sniff the request, yet. I decided to switch back
>to DUID assignment since this problem is worse than the previous.
>3. Maybe it would be possible to overcome the above problems if kea is
>able to match both DUID and MAC address, but it is not allowed in kea. I am
>ought to select one option only. Why?
>
>
> Thanks
>
> Marek
>
>
> Thanks
>
> Marek
>
>
> --
> ISC funds the development of this software with paid support
> subscriptions. Contact us at https://www.isc.org/contact/ for more
> information.
>
> To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.
>
> Kea-users mailing list
> Kea-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/kea-users
>
-- 
ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.

To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.

Kea-users mailing list
Kea-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/kea-users


[Kea-users] dhcp6 address assignment

2022-10-18 Thread Marek Greško via Kea-users
Hello,

I am in a phase of migration ISC DHCPD into kea and I am suffering several 
problems in ipv6 address assignment.

- I used to assign same ipv6 address for the same machine which was dial boot 
linux/windows. It was possible by assigning same ipv6 address to both DUIDs 
before. But in kea this is not allowed. I found out there is a possibility to 
assign ipv6 address by MAC address which was not possible in ISC DHCPD. I was 
very happy with that finding but fallen into second problem.
- The windows machine got 2 interfaces ethernet and wifi. I configured kea to 
assign one ipv6 address to the ethernet adapter and another one to the wifi 
adapter. But after investigating logs kea was receiving dhcp6 request over wifi 
using the ethernet adapter mac address. How is this possible? Is it possible 
the MAC address in DHCP does not match L2 MAC address? I did not sniff the 
request, yet. I decided to switch back to DUID assignment since this problem is 
worse than the previous.
- Maybe it would be possible to overcome the above problems if kea is able to 
match both DUID and MAC address, but it is not allowed in kea. I am ought to 
select one option only. Why?

Thanks

Marek

Thanks

Marek-- 
ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.

To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.

Kea-users mailing list
Kea-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/kea-users