Administrace komentářů

Zdravim.

Mam dve VLAN-y a na zaklade VLAN ID (Option 82 doplneneho relay agentom na switchi) pridelujem IP z 2 roznych rozsahov, resp. na zaklade VLAN ID ich rozdelujem do dvoch tried (class) a potom mam v pool-och na tieto triedy obmedzenia (allow/deny member of). Toto mi funguje, klient dostane IP zo spravneho rozsahu podla toho, ake PVID je na danom porte na switchi nastavene.

Pokial v jednom pool-e nastavim klientovi "staticku" IP na zaklade MAC adresy, ale na switchi mu nastavim PVID z druheho pool-u, tak mu DHCP server prideli IP podla MAC adresy a teda z pool-u, ktory nie je pre tuto VLAN-u. V logu vidim, ze klienta zaradil do spravnej triedy.

Ked mu ale pridam staticku IP adresu aj do pool-u pre jeho VLAN-u, tak uz to funguje spravne.

Aby som to zhrnul: chcem klientovi pridelovat IP adresu podla VLAN-y s tym, ze v jednej VLAN-e moze dostat akukolvek IP adresu, ale v druhej VLAN-e mu ju chcem pridelit na zaklade MAC adresy.

Vdaka.

authoritative;
ddns-update-style             none;
default-lease-time            21600;
max-lease-time                21600;


class "VLAN-200" {
    match if binary-to-ascii(10,16,"",substring(option agent.circuit-id,2,2)) = "200";
    log(info, "matched to a VLAN-200");
}

class "VLAN-222" {
    match if binary-to-ascii(10,16,"",substring(option agent.circuit-id,2,2)) = "222";
    log(info, "matched to a VLAN-222");
}


shared-network FOO-BAR {

    # mgmt LAN - switch (dhcp relay agent)
    subnet 192.168.14.0 netmask 255.255.255.0 {
    }

    # vlan-100 - local LAN
    subnet 172.16.100.0 netmask 255.255.255.0 {
    }

    # vlan-200 - DHCP relay
    subnet 172.16.200.0 netmask 255.255.255.0 {
        pool {
            allow members of     "VLAN-200";
            deny members of      "VLAN-222";
            default-lease-time   300;
            max-lease-time       300;
            range                172.16.200.50 172.16.200.100;
            option routers       172.16.200.1;
            option subnet-mask   255.255.255.0;
            option domain-name-servers   1.1.1.1;

            # AK TOTO ODKOMENTUJEM, TAK TO FUNGUJE
            #host client-200 {
            #    hardware ethernet 00:0b:82:12:b7:65;
            #    fixed-address 172.16.200.75;
            #}
        }
    }

    # vlan-222 - DHCP relay
    subnet 172.16.222.0 netmask 255.255.255.0 {
        pool {
            allow members of     "VLAN-222";
            deny members of      "VLAN-200";
            default-lease-time   300;
            max-lease-time       300;
            range                172.16.222.50 172.16.222.100;
            option routers       172.16.222.1;
            option subnet-mask   255.255.255.0;
            option domain-name-servers   1.1.1.1;

            host client-222 {
                hardware ethernet 00:0b:82:12:b7:65;
                fixed-address 172.16.222.75;
            }
        }
    }
}

Jun 20 17:35:19 test-dhcp dhcpd: matched to a VLAN-200
Jun 20 17:35:19 test-dhcp dhcpd: DHCPDISCOVER from 00:0b:82:12:b7:65 via 192.168.14.50
Jun 20 17:35:19 test-dhcp dhcpd: DHCPOFFER on 172.16.222.75 to 00:0b:82:12:b7:65 via 192.168.14.50
Jun 20 17:35:19 test-dhcp dhcpd: Dynamic and static leases present for 172.16.222.75.
Jun 20 17:35:19 test-dhcp dhcpd: Remove host declaration client-222 or remove 172.16.222.75
Jun 20 17:35:19 test-dhcp dhcpd: from the dynamic address pool for FOO-BAR
Jun 20 17:35:19 test-dhcp dhcpd: matched to a VLAN-200
Jun 20 17:35:19 test-dhcp dhcpd: DHCPREQUEST for 172.16.222.75 (172.16.100.5) from 00:0b:82:12:b7:65 via 192.168.14.50
Jun 20 17:35:19 test-dhcp dhcpd: DHCPACK on 172.16.222.75 to 00:0b:82:12:b7:65 via 192.168.14.50