Skip to content

GitLab

  • Projects
  • Groups
  • Snippets
  • Help
    • Loading...
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
D
dhcp
  • Project overview
    • Project overview
    • Details
    • Activity
    • Releases
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 64
    • Issues 64
    • List
    • Boards
    • Labels
    • Service Desk
    • Milestones
  • Merge Requests 16
    • Merge Requests 16
  • CI / CD
    • CI / CD
    • Pipelines
    • Jobs
    • Schedules
  • Operations
    • Operations
    • Incidents
    • Environments
  • Packages & Registries
    • Packages & Registries
    • Container Registry
  • Analytics
    • Analytics
    • CI / CD
    • Repository
    • Value Stream
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Members
    • Members
  • Collapse sidebar
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
  • ISC Open Source Projects
  • dhcp
  • Issues
  • #109

Closed
Open
Opened Jun 03, 2020 by Nelson Karrick@ndk

DHCP Request ACK'd for host on wrong VLAN

Attached are 3 Files: dhcpd.conf file, and 2 packet captures.

Scenario: Server is connected to the network on multiple VLANs (2 for simplicity). Client connects to a wired switch utilizing MAB/DVLAN to set the VLAN on the port.

Client is assigned VLAN 1000, and DHCP Server assigns an address from the corresponding pool. RADIUS Server changes the VLAN membership of the clients switchport to now be VLAN 2000. The switchport does not bounce, so the Client is unaware of the change. DHCP Lease reaches it's half-life and client attempts to renew the lease.

Expected Result: DHCP Server sends DHCP NAK to client, forcing client to request new IP on correct VLAN.

Observed Result: Client sends DHCP Req (renew) via broadcast message to DHCP Server. DHCP Server sends DHCP ACK, on original VLAN (1000 in this case). Client does NOT recieve DHCP ACK, and keeps trying. Client eventually sends new DHCP REQ to get an IP on correct VLAN (2000)

Other Notes: If the client sends a DHCP Req (renew) on VLAN 2000, for an IP configured on VLAN 1000, and there is no existing lease, one will be created for the client, even though the DHCP ACK is sent on VLAN 1000, and the client does not recieve it.

dhcpd.conf

vlan1000.pcap

vlan2000.pcap

Assignee
Assign to
None
Milestone
None
Assign milestone
Time tracking
None
Due date
None
Reference: isc-projects/dhcp#109