Help with getting a client to receive a DHCP request
As per my other threads I'm trying to set up DHCP on Freeradius. Everyone's helped me to get DHCP to seem to be processing requests however my client device is not getting a response so I think I've screwed up the configuration and being a noob I don't know where to start. My topology: (1) ESXi Linux VM <- (2) ESXi pfSense VM -> (3) Unifi switch -> (4) Unifi wifi AP -> (5) test client device I'm ssh'd into (1), (2), (3) and (4) and running: tcpdump -i respective_interface port 67 or port 68 and the output in each is: current_time, IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:11:22:33:44:55 (oui Unknown), length 314 and nothing else, just lines of request in all of (1) - (4). Here's the output from freeradius -X, so you can see how it's responding - http://pastebin.com/raw/74ekNSNF. Any advice to what I've set up wrong? Could it be the message: "DHCP: Reply will be unicast to your-ip-address" where your-ip-address is the address I actually want the test client device to receive in the response, so therefore I need to broadcast to the whole subnet, or at least (4) so that (5) can see it (and I can see it in tcpdump throughout the network)?
Hi,
and nothing else, just lines of request in all of (1) - (4). Here's the output from freeradius -X, so you can see how it's responding - http://pastebin.com/raw/74ekNSNF. Any advice to what I've set up wrong? Could it be the message:
"DHCP: Reply will be unicast to your-ip-address"
where your-ip-address is the address I actually want the test client device to receive in the response, so therefore I need to broadcast to the whole subnet, or at least (4) so that (5) can see it (and I can see it in tcpdump throughout the network)?
okay..if you are tcpdumping the DHCP traffic to/from your FreeRADIUS box you should see the outbound response....however, I note that 1) Listening on dhcp interface eth1 address 255.255.255.255 port 67 bound to server dhcp so the dhcp server is set to listen on eth1. what address does eth1 have? 2) I see this in your config "src_ipaddr = 127.0.0.1" - umm, no. that address is LOCAL, any network device worth more than 0.01 will not switch that. 3) the result: Sent code 1026 Id -581776393 from 127.0.0.1:67 to 10.11.12.100:68 length 0 "Id -581776393" concerns me - looks like some bug..... however, "from 127.0.0.1:67 to 10.11.12.100:68 length 0 " - I think you'll find no success because your linux box will not send that out.... even in some self-enclosed VM world, the basics of networking must still be adhered to. use proper address that can be switched by the network. alan
Thanks for the reply Alan. 1) eth1 has 10.11.12.3 or something. I copied that mask-type IP from some ancient mailing list post I think. 2) I'll have to read the doco again. So I'm guessing my src_ipaddr should also be the DHCP server's address. 3) I'll reread doco and have another shot tomorrow. I've powered my workstation off for the day. Sorry for my networking ignorance. On Mon, 7 Nov 2016 20:29 , <A.L.M.Buxey@lboro.ac.uk> wrote:
Hi,
and nothing else, just lines of request in all of (1) - (4). Here's the output from freeradius -X, so you can see how it's responding - http://pastebin.com/raw/74ekNSNF. Any advice to what I've set up wrong? Could it be the message:
"DHCP: Reply will be unicast to your-ip-address"
where your-ip-address is the address I actually want the test client device to receive in the response, so therefore I need to broadcast to the whole subnet, or at least (4) so that (5) can see it (and I can see it in tcpdump throughout the network)?
okay..if you are tcpdumping the DHCP traffic to/from your FreeRADIUS box you should see the outbound response....however, I note that
1) Listening on dhcp interface eth1 address 255.255.255.255 port 67 bound to server dhcp
so the dhcp server is set to listen on eth1.
what address does eth1 have?
2) I see this in your config "src_ipaddr = 127.0.0.1" - umm, no. that address is LOCAL, any network device worth more than 0.01 will not switch that.
3) the result:
Sent code 1026 Id -581776393 from 127.0.0.1:67 to 10.11.12.100:68 length 0
"Id -581776393" concerns me - looks like some bug.....
however, "from 127.0.0.1:67 to 10.11.12.100:68 length 0 " - I think you'll find no success because your linux box will not send that out.... even in some self-enclosed VM world, the basics of networking must still be adhered to. use proper address that can be switched by the network.
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
A.L.M.Buxey＠lboro.ac.uk -
Toby Walsh