Re: [Kea-users] Problem using 'config-set' in API

Hi, config-set will rewrite the whole config file. You cannot "append" a configuration bit. To do so you need to use the API. Cheers, V. From: Kea-users on behalf of Andrew Mulheirn via Kea-users Sent: Tuesday, March 5, 2024 10:06 AM To: kea-users@lists.isc.org

Re: [Kea-users] Kea 2.4.0 and duplicate host reservations not working as documented

Maybe https://gitlab.isc.org/isc-projects/kea/-/issues/2796 ? [https://gitlab.isc.org/uploads/-/system/project/avatar/26/kea-logo-100x70.png] "naive" (dhcpd, microsoft style) conflict resolution (immediately reassign lease to reserved host)

Re: [Kea-users] multiple MACs to same IP

Hi, On that topic, I see that [Kea-users] ip-reservations-unique and lease conflict (isc.org) did not get an answer. Has anyone else encountered the same issue as Marc ? Thanks, Veronique From:

[Kea-users] KEA DHCPv6 on Alma8 or RHEL8 clients

Hi, Is there anyone using KEA, for DHCPv6 clients that run OS Alma8 or Rhel8, with host-reservations (fixed IP addresses) ? If yes, do you know if the clients are requesting option 39 = CLIENT_FQDN ? Thanks, Veronique -- ISC funds the development of this software with paid support

Re: [Kea-users] ARM port suggestions for HA+MT mode when Kea is serving both V4 and V6

Hi, My experience is that you have to use different ports indeed. Cheers, Veronique From: Kea-users on behalf of Darren Ankney Sent: Tuesday, September 26, 2023 11:43 AM To: kea-users@lists.isc.org Subject: Re: [Kea-users] ARM port suggestions for HA+MT mode

Re: [Kea-users] Possible bug with Kea DHCP Server?

Hi Chib, Have you checked if the client is requesting the IP with the same ClientID as the one it was using when it first got the lease ? Cheers,v. From: Kea-users on behalf of Stephen Dennis (Gmail) Sent: Monday, September 11, 2023 3:43 AM To:

Re: [Kea-users] got unexpected keyword "valid-lifetime" in reservations map.

I don't know. You should probably test, or get the answer of an expert. From: Kraishak Mahtha Sent: Wednesday, February 22, 2023 11:19 AM To: Veronique Lefebure Cc: kea-users@lists.isc.org Subject: Re: [Kea-users] got unexpected keyword "valid-lif

Re: [Kea-users] got unexpected keyword "valid-lifetime" in reservations map.

Hi, If you look at https://kea.readthedocs.io/en/latest/grammar/grammar.html you can see that valid_life_time is not an attribute of host-reservations: reservation_param ::= duid 753 | reservation_client_classes 754 | client_id_value 755

Re: [Kea-users] Option 43 problems

Hi, Reading https://kea.readthedocs.io/en/kea-2.2.0/arm/dhcp4-srv.html#dhcpv4-vendor-specific-options I see that it says: "In this example, we also include the Vendor-Specific Information option, which conveys our sub-option foo. This is required; otherwise, the option will not be included

Re: [Kea-users] DHCPv6 option 16 and built in client class

Hi Xuo, I don't know if you made any progress on this. I have been playing a bit more with dhpv6 these days and in fact, when a client is assigned to class UNKNOWN I believe that it only means that no host-reservation was found by KEA for that client. It does not mean that your client-class

Re: [Kea-users] DHCPv4 Conflict resolution on MAC change

+1 From: Kea-users on behalf of GIRSTMAIR Tobias via Kea-users Sent: Monday, January 30, 2023 10:54 AM To: dh...@thehobsons.co.uk ; kea-users@lists.isc.org Subject: Re: [Kea-users] DHCPv4 Conflict resolution on MAC change On Fri, 2023-01-27 at 19:58 +,

Re: [Kea-users] DHCPv4 Conflict resolution on MAC change

Hi Simon, The problem is new in the sense that we did not have that "problem" when using ISC DHCP since it would not check for the existing leases in case of static IP host-reservation. Cheers, Veronique From: Kea-users on behalf of Simon Sent: Friday,

Re: [Kea-users] DHCPv4 Conflict resolution on MAC change

We would have the same use-case as you, Tobi, and I guess we would not be the only ones ? The problem is also mentioned on https://kea.readthedocs.io/en/latest/arm/hooks.html?highlight=replace-client-id#the-replace-client-id-flag by the way. On

Re: [Kea-users] Kea HA Heartbeat Failure

Hi, Have you tried to run a manual curl command from one of the two servers to its partner ? From: Kea-users on behalf of duluxoz Sent: Thursday, January 26, 2023 9:26 AM To: kea-users@lists.isc.org Subject: [Kea-users] Kea HA Heartbeat Failure Hi All,

Re: [Kea-users] IPV6 client gets the wrong IP for sometime after a reboot

And Francis, you confirm that this is a behaviour which is different between KEA (withoit flex-id) and ISC DHCP ? From: Veronique Lefebure Sent: Tuesday, January 17, 2023 5:14 PM To: Francis Dupont Cc: Darren Ankney ; kea-users@lists.isc.org Subject: Re: [Kea

Re: [Kea-users] IPV6 client gets the wrong IP for sometime after a reboot

Thanks Francis, So according to https://kea.readthedocs.io/en/latest/arm/hooks.html?highlight=flex-id#available-hook-librarieswe need to subscribe to ISC support to make use of it. From: Francis Dupont Sent: Tuesday, January 17, 2023 4:53 PM To: Veronique

Re: [Kea-users] IPV6 client gets the wrong IP for sometime after a reboot

DHCPv6. It is defined in RFC 8415. Basically: The DUID must be present and the client must use the same DUID. The server must use that as the identifier to assign leases. On Jan 17, 2023, at 6:18 AM, Veronique Lefebure wrote: Waw. The client behaviour is not under control of the DHCP server

Re: [Kea-users] IPV6 client gets the wrong IP for sometime after a reboot

@lists.isc.org Subject: Re: [Kea-users] IPV6 client gets the wrong IP for sometime after a reboot On Tue, Jan 17, 2023, at 04:54, Veronique Lefebure wrote: Hi, I have observed that an IPV6 client gets the wrong IP when it reboots. See detailed logs below. The problem seems to be due to the fact the DUID

[Kea-users] IPV6 client gets the wrong IP for sometime after a reboot

Hi, I have observed that an IPV6 client gets the wrong IP when it reboots. See detailed logs below. The problem seems to be due to the fact the DUID of the client changes after reboot. Anyone else has observed the same ? How to go around that and make sure that the client gets the correct IP

Re: [Kea-users] Load-Balancing Network issue between Relay and Kea

Very interesting thread. Mathias, you wrote "Expected behaviour: Kea 2 sees the unacked clients of Kea 1 and sets Kea 1 in partner-down state and handles all requests.", but, If there is no traffic between DHCP clients and Kea1, then the value of max-unacked-clients on server1 cannot increase

Re: [Kea-users] Disable multicast Listening

We are using ip6tables for dropping all traffic coming from ff02::1:2. Cheers, Veronique From: Kea-users on behalf of Frey, Rick E via Kea-users Sent: Wednesday, January 4, 2023 5:02 PM To: s k ; kea-users Subject: Re: [Kea-users] Disable multicast Listening

Re: [Kea-users] subclass handling in kea-dhcp

Hi, We have something that looks like the following. Hope it helps. Cheers, Veronique { "Dhcp4": { ... "client-classes": [ { "name": "blocked-list", "test": "(pkt4.mac == 0x0 or pkt4.mac == 0xXXX or )", }, { "name":

Re: [Kea-users] KEA sends valid-lifetime = 0

For people who would encounter the same issue, see https://gitlab.isc.org/isc-projects/kea/-/issues/2660 From: Kea-users on behalf of Veronique Lefebure Sent: Thursday, January 27, 2022 3:31 PM To: kea-users@lists.isc.org Subject: [Kea-users] KEA sends valid

Re: [Kea-users] BOOTP clients

Hi, Have you loaded the bootp hooks-libraries ? Cheers, Veronique From: Kea-users on behalf of Kraishak Mahtha Sent: Friday, December 2, 2022 10:37 AM To: kea-users@lists.isc.org Subject: [Kea-users] BOOTP clients Hi, I am using the kea 2.2.0 version I am

Re: [Kea-users] How to best update the KEA configuration on a HA hot-standby KEA setup

22 8:36 PM To: Veronique Lefebure Cc: kea-users@lists.isc.org Subject: Re: [Kea-users] How to best update the KEA configuration on a HA hot-standby KEA setup The great thing about Kea is that it is very flexible and you can make it work in a wide variety of ways and find the setup that works bes

Re: [Kea-users] How to best update the KEA configuration on a HA hot-standby KEA setup

vember 17, 2022 4:20 PM To: Veronique Lefebure Cc: kea-users@lists.isc.org Subject: Re: [Kea-users] How to best update the KEA configuration on a HA hot-standby KEA setup We also have all the main configuration in plain json files. Like you, we require hosts on some of our networks to

Re: [Kea-users] How to best update the KEA configuration on a HA hot-standby KEA setup

I am wondering whether it is not more efficient to perform a "config-write" followed by a "config-reload" rather than a "config-set" ? From: Kea-users on behalf of Veronique Lefebure Sent: Thursday, November 17, 2022 9:19 A

Re: [Kea-users] How to best update the KEA configuration on a HA hot-standby KEA setup

From: Dan Oachs Sent: Wednesday, November 16, 2022 6:31 PM To: Veronique Lefebure Cc: kea-users@lists.isc.org Subject: Re: [Kea-users] How to best update the KEA configuration on a HA hot-standby KEA setup I am curious why you are updating the config every 5 minutes

[Kea-users] How to best update the KEA configuration on a HA hot-standby KEA setup

Hi, When running KEA on one single server, (no HA), and updating the KEA dhcp configuration file every 5 minute, using "config-set" https://kea.readthedocs.io/en/latest/arm/ctrl-channel.html?highlight=config-set#the-config-set-command , we can see that KEA does not reply to the DHCP requests

[Kea-users] Questions about importing leases

Hi, - Is there a tool that can be used to import leases from ISC DHCP lease file into a KEA server (where we use local lease database file) ? - If we add a lease using "lease4-add" to a KEA server, is it supposed to be automatically replicated to the hot-standby KEA server in a

[Kea-users] role-based access control for the KEA Control Agent

Hi, Looking at 23. Kea Security — Kea 2.3.1-git documentation

Re: [Kea-users] KEA allocates an IP while it should not

On 30/08/2022 17:41 Francis Dupont wrote: > > > Veronique Lefebure writes: > > I would like to understand why KEA allocates an IP which should not be > > alloc > > ated. > > > > > > I have, on purpose (for testing KEA behaviour), declared the follow

[Kea-users] KEA allocates an IP while it should not

Hi, I would like to understand why KEA allocates an IP which should not be allocated. I have, on purpose (for testing KEA behaviour), declared the following global host reservation: { "boot-file-name": "", "client-classes": [ ], "hostname": "cs-test-1a", "hw-address":

Re: [Kea-users] shared-network "interface" and "relay" parameters

Dear Francis, How is that configured in ISC DHCP ? We are running ISC DHCP in production today, and we don't have anything like that configured in dhcpd.conf. It looks to me that everything works out-of-the-box, both with ISC DHCP and with KEA, following the logic based on the use of ciadddr

[Kea-users] ALLOC_ENGINE_V6_ALLOC_NO_LEASES_HR and ALLOC_ENGINE_V6_ALLOC_UNRESERVED

Hi, Out test client is failing to get an IPv6 IP. Enabling debug logs, we see messages from the server that seem contradictory: 2022-06-21 16:43:50.948 DEBUG [kea-dhcp6.alloc-engine/13499.139838611867840] ALLOC_ENGINE_V6_ALLOC_NO_LEASES_HR no leases found but reservations exist for client

[Kea-users] EVAL_RESULT is in category kea-dhcp4.options for ipv4 but in kea-dhcp6.dhcp6 for ipv6

Hi, using kea 2.1.6 I see that EVAL_RESULT logs are classified in different categories for ipv4 and ipv6: ipv4: kea-dhcp4.options ipv6: kea-dhcp6.dhcp6 Is it a (minor) bug or do I have something mis-configured on my side ? Thanks, Veronique -- ISC funds the development of

Re: [Kea-users] shared-network "interface" and "relay" parameters

Dear Francis, thanks a lot for your answer. You say: > Please note the localization process is the same for ISC DHCP and Kea: > it follows the standard so selectors are used in the same order, > and in both when shared networks are used the "selected subnet" is > in fact the selected shared

[Kea-users] shared-network "interface" and "relay" parameters

Hi, I have read * https://kea.readthedocs.io/en/latest/arm/dhcp4-srv.html?highlight=subnet4#local-and-relayed-traffic-in-shared-networks * and https://kea.readthedocs.io/en/latest/arm/dhcp4-srv.html?highlight=subnet4#using-a-specific-relay-agent-for-a-subnet But the following is not clear to

[Kea-users] debug logging for HA heartbeat

Hi, I would like to get a DEBUG logging each time a server receives a heartbeat from its partner, in a HA setup. I have enabled DEBUG level 99 for kea-dhcp4.ha-hooks but it does not provide that info, I am trying to understand why our standby server shows the following every 2 min:

[Kea-users] KEA sends valid-lifetime = 0

Hi, For the following query: 16:24:15.730401 IP6 (hlim 1, next-header UDP (17) payload length: 143) cs-lab11-kea.dhcpv6-client > ff02::1:2.dhcpv6-server: [bad udp cksum 0xc2bb -> 0xa8e1!] dhcp6 renew (xid=50bedb (client-ID type 4) (server-ID hwaddr/time type 1 time 692127779 00259074ca68)

[Kea-users] KEA High-Availability experience

Hi, we plan to adopt the "hot-standby" high-availability mode. The main reason being that compared to load-balancing, it makes the configuration files simpler. Has any one have experience to share on this topic ? If yes, what is the DHCP traffic rate you have ? How many (dynamic) leases in

[Kea-users] lease state codes

Hi, In https://kea.readthedocs.io/en/latest/api.html?highlight=lease6-get-all#lease6-get-all https://kea.readthedocs.io/en/latest/api.html?highlight=lease6-get-all#lease6-get-all What is the meaning of the "lease state" ? What are the possible values ? for ipv4 and for ipv6 ? Thanks,

[Kea-users] fqdn-fwd and fqdn-rev in lease file

Hi, Do I understand correctly that if an IP is assigned dynamically to a client, and ddns-send-updates is set to true, then the lease file should show the followin for the assigned lease : "fqdn-fwd": true, "fqdn-rev": true, It seems to be the case for dhcp6 but not for dhcp4 where I see

[Kea-users] valid-lifetime is short than preferred lifetime

Hi, Our client is refusing an ipv6 lease offered by KEA: [root@cs-lab11-kea ~]# dhclient -6 -v enp7s0f1 Internet Systems Consortium DHCP Client 4.2.5 Copyright 2004-2013 Internet Systems Consortium. All rights reserved. For info, please visit https://www.isc.org/software/dhcp/ Listening on

[Kea-users] KEA support for option 150 (tftp-server-ip)

Hello, In ISC DHCP v4.4.2 we have (https://downloads.isc.org/isc/dhcp/4.4.2/dhcp-4.4.2-RELNOTES) : Support for sending and receiving additional DHCP4 options has been added to both the dhcpd and dhclient. Specifically: option codes 93,94, and 97 (RFC 4578); code 150 (RFC 5859); and codes

Re: [Kea-users] HTTP_CONNECTION_HANDSHAKE_FAILED TLS handshake

Many thanks Francis, we will have a look about how to have that fixed on our side. Veronique > On 24/11/2021 20:06 Francis Dupont wrote: > > > The "wrong version number" error is returned by some crypto libraries > when TLS is expected but clear text HTTP is received. > > Regards > >

[Kea-users] HTTP_CONNECTION_HANDSHAKE_FAILED TLS handshake

Hi, I am testing a high availibility setup for 2 KEA dhcp4 servers. I get these errors: 2021-11-24 11:33:41.962 DEBUG [kea-ctrl-agent.http/8134.140201213065408] HTTP_CONNECTION_HANDSHAKE_START start TLS handshake with xx.xx.xx.252 with timeout 10 2021-11-24 11:33:42.963 INFO

[Kea-users] Support for supersede together with dhcp-server-identifier

Hi, please see https://gitlab.isc.org/isc-projects/kea/-/issues/2090 We are wondering if any of you would have the same need, or maybe have a solution. Thanks___ ISC funds the development of this software with paid support subscriptions. Contact us

Re: [Kea-users] kea-dhcp4 -t file: check the configuration file syntax and exit but fails because of interface

YES :-) That's the work around. Thanks !! On 27/08/2021 15:42, Andrei Pavel wrote: ip link add x type bridge ___ ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more

Re: [Kea-users] kea-dhcp4 -t file: check the configuration file syntax and exit but fails because of interface

it in /tmp/ or equivalent and run kea-dhcp4 -t /tmp/kea-dhcp4.conf and then copy it into place if it passes the test. I doubt that ISC is going to be keen to not check certain bits of the configuration file (such as the interface section). - Original Message - From: "Veronique Lef

Re: [Kea-users] kea-dhcp4 -t file: check the configuration file syntax and exit but fails because of interface

the conf file on host2 where it will live? - Original Message - From: "Veronique Lefebure" To: "kea-users" Sent: Friday, August 27, 2021 5:39:15 AM Subject: [Kea-users] kea-dhcp4 -t file: check the configuration file syntax and exit but fails because of interface

[Kea-users] kea-dhcp4 -t file: check the configuration file syntax and exit but fails because of interface

Hi, Before deploying a new kea configuration file on our DHCP server, we want to validate it. The configuration file "kea-dhcp4.conf" is generated on host1 where we want to validate it by running     kea-dhcp4 -t kea-dhcp4.conf And once validation has passed, we plan to deploy

[Kea-users] How to use ifelse in the client-class definition

Hi, Now that I got the confirmation that we cannot use ifelse in the host reservation, let me give more details about what we are looking for at the level of the client-class definition. (this refers to [Kea-users] Example for ifelse in host reservation or class (isc.org)

[Kea-users] Example for ifelse in host reservation or class

Hi, Is there a way to use ifelse in a host reservation ? We would like something like "reservations": [ { "hw-address": "xx:xx:xx:xx:xx:fa", "ip-address": "yy.yy.yy.121", "hostname": "lab-client", "client-classes": [ " ifelse ( substring(option[vendor-class-identifier].text, 0, 9) ==