• Adding Custom Configuration in Kea DHCP Server with pfSense+ 25.03

    Pinned
    21
    4 Votes
    21 Posts
    2k Views
    GertjanG

    @FCS001FCS said in Adding Custom Configuration in Kea DHCP Server with pfSense+ 25.03:

    One showed up after some restarts of switches ....

    Note: Your mileage may vary :)

    That's what I saw a while back when was learning how ti work with Unifi stuff.

    New unifi devices - or unifi devices I've reset, can be hooked up to the networks and from then it is adoptable right way (reboot after a device 'button' reset take some time to get awake - or yo have to try again). Or, that's how I understood the procedure.
    Didn't understand what was happening as one in a while this just fails ... the reset wasn't done good enough ?
    I wanted to know, back then, if it was a hassle every time, or if I rally could add more 'unifi' stuff easily, create a situation where I can unbox the device, hook it, and wait for the "do you want to adopt the new device ?" controller message. I figured out that that would be the way to go : everything is set up in pfSense so I can add physically the new unifi device, set them up from the controller and call it a day. No need to get my phone, approach the device, have it point to a 'controller IP' etc.

  • HEADS UP: Be aware of Trusted Recursive Resolver (TRR) in Firefox

    Pinned
    85
    17 Votes
    85 Posts
    39k Views
    kiokomanK

    @Bob-Dig idk it's not my phone, if it's "Private DNS" settings than it was probably on by default, my family does not know what dot / doh is

    @johnpoz exactly

  • Correct DNS Configuration (OpenVPN issue)

    1
    0 Votes
    1 Posts
    13 Views
    No one has replied
  • Strange DNS issue for internal clients...

    12
    0 Votes
    12 Posts
    117 Views
    johnpozJ

    @ericwentz where did you set that in kea? If kea is registering the entry? Did you set min ttl in unbound or something?

    And watchdog sure shouldn't be needed.. It has had series issues in the past.

  • 0 Votes
    2 Posts
    21 Views
    provelsP

    I'd backup the config.xml, edit it in Notepad++, and "Find/Replace All" the old prefix with the new. Save and import it when the time comes. But that's me, just an idiot on the Interwebs who doesn't even use v6.

  • DHCP Reservation and Lease Assigned to Single MAC

    6
    0 Votes
    6 Posts
    104 Views
    J

    @SteveITS I did restart but I have been adding a lot reservations so I I noticed it intermittently and just decided to give up and move away from Kea

  • ARP Permanent Entry

    2
    0 Votes
    2 Posts
    46 Views
    J

    I was able to find and delete the entry by searching the XML file and it was in virtual IPs.

  • Filterdns has stopped resolving hostnames in firewall aliases

    6
    0 Votes
    6 Posts
    219 Views
    S

    @Gertjan Unbound's been running since May 1 on this router. Not using DHCP registration, or even DHCP on this router.

    unbound 19499 0.0 2.3 124144 92208 - Ss 1May25 14:45.04 /usr/local/sbin/unbound -c /var/unbound/unbound.conf

    One of Jim's comments in 8758 was, "The I state indicates it's sleeping for over 20 seconds and per-se is not the problem because filterdns threads sleep for 1 minute so it will stay as S in the first 20 seconds and then move to I." So that may just be a red herring.

    I didn't write it above but the missing IP in question this time was my home, and I log in every single day. Also AFAICT the IP didn't change (no notification in pfSense). So the IP just disappeared from the table one day.

  • Seemingly random ethernet link drops, usually at DHCP lease T1

    16
    0 Votes
    16 Posts
    327 Views
    GertjanG

    @Andy142

    Pretty solid proof then that the ISP device, connected to the pfSense WAN port took down the interface.
    Afaik : reasons can be : if its a modem type device : they do this to signal down stream a data carrier loss.
    Bad power.
    Bad NIC.

    Most often, these ISP devices have also a GUI. It's time to have a look at, maybe there are details about the loss available.

  • DNS resolver configuration Issue

    4
    0 Votes
    4 Posts
    161 Views
    V

    @Gokulapandi
    The DNS resolver doesn't hand out private IPs by default. You have to enable this with a custom option:

    server: private-domain: "<your-domain.tld>"

    The server line is only needed if you haven't one already, otherwise you can write the private-domain line below of it.

  • DMZ Interface Tab missing from DHCP Service Settings

    7
    0 Votes
    7 Posts
    106 Views
    patient0P

    @johnpoz yeah, I guess 10 would be enough for some IoT devices like light bulbs, you garage door, window blinds or sun shades (whatever the right word).
    For the DMZ on the other hand it may be a bit slow.

  • Connection issue with DHCP

    1
    0 Votes
    1 Posts
    71 Views
    No one has replied
  • Redirecting Client DNS Requests Dosen't work

    30
    0 Votes
    30 Posts
    873 Views
    johnpozJ

    @DjJoakim yeah so stuff using other than your IP will be redirected, and stuff using the pfsense IP will be allowed.

  • Issue with pfSense DHCP Lease Status Display

    9
    0 Votes
    9 Posts
    196 Views
    S

    @Gertjan

    will do, thank you very much for your help

  • Trailing dot on DHCP DNS entries from Windows clients

    8
    0 Votes
    8 Posts
    955 Views
    B

    I have a laptop with a mapping for both the wired and wireless MAC, but when it gets a lease, instead of, for example, "laptop" as the client ID, it is "laptop." and gets a pool address instead, even though the MAC matches the reservation. Very annoying.

  • KEA DHCP missing "Register DHCP leases in DNS Resolver..."

    115
    10 Votes
    115 Posts
    43k Views
    tinfoilmattT

    @webdawg said in KEA DHCP missing "Register DHCP leases in DNS Resolver...":

    Sorry to necrobump, but I am a long term user of pfSense. I really feel strongly that this thread has been cr*apped on.
    [ . . . ]
    You are breaking things in one market segment, and then being rude to your users when they jump on your forums.

    Your post seems to be directed at Netgate. But I count only two official Netgate replies (from the same poster) up until this point—and both are empathetic and respectful.

    As one of the 'crappers' on the thread, I feel obligated to point out that the rest of us here are merely users like you, who may simply disagree with some of the points you and others are making.

  • Kea server is down

    5
    0 Votes
    5 Posts
    363 Views
    GertjanG

    @jeffry-maynard said in Kea server is down:

    let me know if you have figured out a fix

    You are using ... 2.7.2 ?
    Afaik, there was a small patch avaible since the beginning to solve this situation.
    Or, even better : 2.8.0 beta is out now for several weeks, and it look very promising,

  • DHCP DNS hostname registration with Kea + 2.8.0 beta

    1
    0 Votes
    1 Posts
    93 Views
    No one has replied
  • Domain Override results in both A record and SERVFAIL response

    18
    0 Votes
    18 Posts
    815 Views
    X

    @rtadams89 Is it the check-mk agent? Have you managed to solve?

  • Cannot contact VM via host name

    3
    0 Votes
    3 Posts
    119 Views
    T

    @Gertjan said in Cannot contact VM via host name:

    @tknospdr said in Cannot contact VM via host name:

    When I try to ping by IP, it times out.

    ICMP (is not UDP neither TCP) is allowed with firewall rules ?

    I did say it worked via host name, that would show that ICMP is allowed, right?

    @tknospdr said in Cannot contact VM via host name:

    from a browser in

    That browser uses what DNS ? Maybe not pfSense so it couldn't know about the host over ride.

    Yes, all the browsers in my LAN use my pf box for DNS.

    @tknospdr said in Cannot contact VM via host name:

    If I enter the host name from a different subnet, I get a 'server dropped the connection' error.

    The device with that host name, does it allow connections coming in from your other local networks ?

    It does.

    So I found out that I had to create a bridge network connection in order for my VM and host to talk to one another.
    Everything seems to be talking correctly now.

    My next hurdle is to get the packages I built the VM for to work, but that's beyond the scope of this forum.

    For posterity, if you have TrueNAS and a VM, watch this video:
    Network Bridge in TrueNAS

Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.