Dotaz: ISC DHCPD, pool a host

[Dušan]

Dobrý deň prajem všetkým.

Mám dhcp server (na dvoch vlanách) s následovnou konfiguráciou:

subnet 10.1.1.0 netmask 255.255.255.0 {
  option subnet-mask 255.255.255.0;
  option broadcast-address 10.1.1.255;
  option routers 10.1.1.254;
  option domain-name-servers 10.1.1.254;
  option netbios-name-servers 10.1.1.254;
  option ntp-servers 10.1.1.254;
  next-server 10.1.1.254;

  pool {
    range 10.1.1.1 10.1.1.100;
    deny unknown-clients;
  }

  pool {
    range 10.1.1.101 10.1.1.200;
    allow unknown-clients;
  }

  pool {
    range 10.1.1.201 10.1.1.254;
    deny unknown-clients;
  }
}

subnet 10.2.1.0 netmask 255.255.255.0 {
  option subnet-mask 255.255.255.0;
  option broadcast-address 10.2.1.255;
  option routers 10.2.1.254;
  option domain-name-servers 10.2.1.254;
  option netbios-name-servers 10.2.1.254;
  option ntp-servers 10.2.1.254;
  next-server 10.2.1.254;

  pool {
    range 10.2.1.1 10.2.1.100;
    deny unknown-clients;
  }

  pool {
    range 10.2.1.101 10.2.1.200;
    allow unknown-clients;
  }

  pool {
    range 10.2.1.201 10.2.1.254;
    deny unknown-clients;

    host HOST-01 {
      hardware ethernet 12:34:56:78:90:ab;
      fixed-address 10.2.1.251;
    }

    host HOST-02 {
      hardware ethernet 12:34:56:78:90:cd;
      fixed-address 10.2.1.252;
    }

    host HOST-03 {
      hardware ethernet 12:34:56:78:90:ef;
      fixed-address 10.2.1.253;
    }
  }
}

Všetko síce funguje ako má, teda zariadenie definované pomocou host dostate priradenú IP a neznáme zariadenia dostávaju IP z rozsahu "allow unknown-clients", ale dhcp mi spamuje syslog s upozornením:

May 25 13:05:57 hq dhcpd[109732]: Dynamic and static leases present for 10.2.1.252.
May 25 13:05:57 hq dhcpd[109732]: Remove host declaration HOST-02 or remove 10.2.1.252
May 25 13:05:57 hq dhcpd[109732]: from the dynamic address pool for 10.2.1.0/24

A už hľadám ako besný druhý deň ale netuším ako to má byť správne definované. Za odpovede vopred veľmi pekne ďakujem.

Odpovědi

[MP]

pool { range 10.2.1.201 10.2.1.254;

Zkratte to treba na 10.2.1.240. Nemuzete michat staticke a dynamicke prirazovani adresy v jednom rozsahu.

[Dušan]

A tu je to asi to moje nepochopenie konfigurácie. Ja chcem mať vyhradené IP rozsahy pre statickú konfiguráciu práve tie "10.X.1.1-10.X.1.100" a "10.X.1.201-10.X.1.254". Tým pádom som myslel, že musím mať takto definované pool-y s "deny unknown-clients". Ak to tak nie je, tak načo je vôbec "deny unknown-clients"? A následovná konfigurácia by bola tým pádom správna a v poriadku?

subnet 10.1.1.0 netmask 255.255.255.0 {
  option subnet-mask 255.255.255.0;
  option broadcast-address 10.1.1.255;
  option routers 10.1.1.254;
  option domain-name-servers 10.1.1.254;
  option netbios-name-servers 10.1.1.254;
  option ntp-servers 10.1.1.254;
  next-server 10.1.1.254;

  pool {
    range 10.1.1.101 10.1.1.200;
    allow unknown-clients;
  }
}

subnet 10.2.1.0 netmask 255.255.255.0 {
  option subnet-mask 255.255.255.0;
  option broadcast-address 10.2.1.255;
  option routers 10.2.1.254;
  option domain-name-servers 10.2.1.254;
  option netbios-name-servers 10.2.1.254;
  option ntp-servers 10.2.1.254;
  next-server 10.2.1.254;

  pool {
    range 10.2.1.101 10.2.1.200;
    allow unknown-clients;
  }

  host HOST-01 {
    hardware ethernet 12:34:56:78:90:ab;
    fixed-address 10.2.1.251;
  }

  host HOST-02 {
    hardware ethernet 12:34:56:78:90:cd;
    fixed-address 10.2.1.252;
  }

  host HOST-03 {
    hardware ethernet 12:34:56:78:90:ef;
    fixed-address 10.2.1.253;
  }
}

Ide mi proste o to aby dynamicky boli pridelované IP adresy len z rozsahu "10.X.1.101-10.X.1.200"

[Dušan]

No neviem či som na to prišiel, ale každopádne - môže mi niekto fundovaný potvrdiť, že či táto konfigurácia je v poriadku?

subnet 10.1.1.0 netmask 255.255.255.0 {
  option subnet-mask 255.255.255.0;
  option broadcast-address 10.1.1.255;
  option routers 10.1.1.254;
  option domain-name-servers 10.1.1.254;
  option netbios-name-servers 10.1.1.254;
  option ntp-servers 10.1.1.254;
  next-server 10.1.1.254;

  range 10.1.1.101 10.1.1.200;
  allow unknown-clients;
}

group {
  host HOST-11 {
    hardware ethernet 11:34:56:78:90:ab;
    fixed-address 10.1.1.251;
  }

  host HOST-12 {
    hardware ethernet 11:34:56:78:90:cd;
    fixed-address 10.1.1.252;
  }

  host HOST-13 {
    hardware ethernet 11:34:56:78:90:ef;
    fixed-address 10.1.1.253;
  }
}

subnet 10.2.1.0 netmask 255.255.255.0 {
  option subnet-mask 255.255.255.0;
  option broadcast-address 10.2.1.255;
  option routers 10.2.1.254;
  option domain-name-servers 10.2.1.254;
  option netbios-name-servers 10.2.1.254;
  option ntp-servers 10.2.1.254;
  next-server 10.2.1.254;

  range 10.2.1.101 10.2.1.200;
  allow unknown-clients;
}

group {
  host HOST-21 {
    hardware ethernet 22:34:56:78:90:ab;
    fixed-address 10.2.1.251;
  }

  host HOST-22 {
    hardware ethernet 22:34:56:78:90:cd;
    fixed-address 10.2.1.252;
  }

  host HOST-23 {
    hardware ethernet 22:34:56:78:90:ef;
    fixed-address 10.2.1.253;
  }
}

[X]

Poznamky:

allow unknown-clients;

Tohle je vychozi nastaveni a nemusi se vubec uvadet.

next-server 10.2.1.254;

Ocividne nebootujes ze site, taktez neni potreba.

option netbios-name-servers 10.1.1.254; option ntp-servers 10.1.1.254;

Urcite to provozujes nebo je to proste opsane?

[Dušan]

Áno - to allow unknown ma nenapadlo, že je default a áno, ostatné veci z poznámok používam reálne.

[X]

Ok, no problem.