• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

KEA DHCP - lacking features

DHCP and DNS
15
60
16.7k
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • R
    RobbieTT @johnpoz
    last edited by Nov 7, 2023, 8:46 PM

    @johnpoz

    I'm only talking pfSense.

    ☕️

    1 Reply Last reply Reply Quote 0
    • M
      michmoor LAYER 8 Rebel Alliance @RobbieTT
      last edited by Nov 7, 2023, 9:02 PM

      @RobbieTT said in KEA DHCP - lacking features:

      efore it went live it was suggested that encouraging users to leave ISC for Kea was rather over done, considering its immaturity.

      Yep and this was definitely confusing. We know its BETA but also the strong encouragement to use it now as a replacement didnt make sense. Its not feature-complete.

      Firewall: NetGate,Palo Alto-VM,Juniper SRX
      Routing: Juniper, Arista, Cisco
      Switching: Juniper, Arista, Cisco
      Wireless: Unifi, Aruba IAP
      JNCIP,CCNP Enterprise

      1 Reply Last reply Reply Quote 0
      • M
        maverickws
        last edited by Nov 8, 2023, 10:06 AM

        Thank you all for your replies.

        Ok will be looking forward for the final product and stick to ISC for now, but notice there's deprecation warnings everywhere suggesting people to migrate, it makes one believe it is already a matured implementation. Cheers

        R 1 Reply Last reply Nov 8, 2023, 10:10 AM Reply Quote 0
        • R
          RobbieTT @maverickws
          last edited by Nov 8, 2023, 10:10 AM

          @maverickws

          Well we may question veracity of the warnings but they did provide a check-box to disable it.

          ☕️

          M 1 Reply Last reply Nov 8, 2023, 10:12 AM Reply Quote 0
          • M
            maverickws @RobbieTT
            last edited by Nov 8, 2023, 10:12 AM

            @RobbieTT well yeah, I mean if it still needs so much polishing, and that's fine, just don't push the warnings like that just yet. Announce it some other way, have the January release put the warnings (if hopefully the implementation is more advanced).
            That'd be a strategy I'd understand.

            R 1 Reply Last reply Nov 8, 2023, 10:15 AM Reply Quote 1
            • R
              RobbieTT @maverickws
              last edited by Nov 8, 2023, 10:15 AM

              @maverickws - Yep.

              1 Reply Last reply Reply Quote 0
              • J
                jimp Rebel Alliance Developer Netgate
                last edited by Nov 8, 2023, 1:17 PM

                There is a bit of confusion above. Static mappings/"reservations" in Kea work. It's the DNS resolution/integration that does not work yet.

                And yes there are several missing features yet but bear in mind a significant portion of users don't use all of the available features. Most just use the basic functionality.

                Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                Need help fast? Netgate Global Support!

                Do not Chat/PM for help!

                R 1 Reply Last reply Nov 8, 2023, 1:51 PM Reply Quote 0
                • R
                  RobbieTT @jimp
                  last edited by Nov 8, 2023, 1:51 PM

                  @jimp

                  No real confusion, just an absence of formal documentation. Other than the release notes I have not seen anything substantive on the subject. There is nothing in the pfSense online documentation and there is no mention of Kea under DHCP. If there was a white-paper / technical paper on the subject I have yet to find it.

                  The only concern I was aware of in the dev/beta stage was the inclusion of a warning banner encouraging a switch away from ISC. As the release notes for v23.09 make clear, Kea on pfSense is only in 'Feature Preview' Stage and gaps are expected.

                  As we stand, there is a GUI warning about continuing to use ISC and a warning in the release notes about using Kea. I'm not sure having a warning in place for both ISC and Kea is appropriate in production software.

                  ☕️

                  1 Reply Last reply Reply Quote 0
                  • J
                    jimp Rebel Alliance Developer Netgate
                    last edited by Nov 8, 2023, 1:58 PM

                    The docs don't mention Kea because the goal is eventually to have feature and UI parity and having to keep all the docs updated as things are addressed would be quite a lot more work that would just be undone in a couple months. Once it's complete there won't be many differences in the UI between ISC/Kea.

                    The warnings are both accurate. ISC is EOL and people should consider switching. The features needed for the bulk of users are there and work and many if not most users could switch and barely notice a difference in behavior. However, since it isn't feature complete, the warning about that in the release notes/blog/etc is necessary and accurate.

                    The users who post on the forum/social media in general tend to be more advanced and sure they may want/need some features that aren't there yet, but you have to remember they are not necessarily representative of the hundreds of thousands of other users.

                    Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                    Need help fast? Netgate Global Support!

                    Do not Chat/PM for help!

                    R M 2 Replies Last reply Nov 8, 2023, 2:06 PM Reply Quote 3
                    • R
                      RobbieTT @jimp
                      last edited by Nov 8, 2023, 2:06 PM

                      @jimp said in KEA DHCP - lacking features:

                      ISC is EOL and people should consider switching. The features needed for the bulk of users are there and work and many if not most users could switch and barely notice a difference in behavior.

                      Thanks Jim and a 'note' in the GUI that reflected the above quote is close to ideal. To avoid startling any non-technical folk you could soften it further by stating that "ISC remains fully supported but is nearing EOL and...".

                      I can testify that it is indeed remarkably easy and painless to switch between the two; something I commented positively on during the dev stage.

                      ☕️

                      1 Reply Last reply Reply Quote 0
                      • M
                        michmoor LAYER 8 Rebel Alliance @jimp
                        last edited by Nov 8, 2023, 2:17 PM

                        @jimp said in KEA DHCP - lacking features:

                        The users who post on the forum/social media in general tend to be more advanced and sure they may want/need some features that aren't there yet, but you have to remember they are not necessarily representative of the hundreds of thousands of other users.

                        This is a fair point.
                        Follow up - Do we need to wait for 24.03 to get the feature complete Kea or can it be delivered in an update prior?

                        Firewall: NetGate,Palo Alto-VM,Juniper SRX
                        Routing: Juniper, Arista, Cisco
                        Switching: Juniper, Arista, Cisco
                        Wireless: Unifi, Aruba IAP
                        JNCIP,CCNP Enterprise

                        J 1 Reply Last reply Nov 8, 2023, 2:20 PM Reply Quote 0
                        • J
                          jimp Rebel Alliance Developer Netgate @michmoor
                          last edited by Nov 8, 2023, 2:20 PM

                          @michmoor said in KEA DHCP - lacking features:

                          Follow up - Do we need to wait for 24.03 to get the feature complete Kea or can it be delivered in an update prior?

                          Most likely it will take enough time to implement that it will be close to the release before it's ready anyhow, but if it's ready before then, we are considering different methods of distribution (e.g. as a system patches update if possible). Though it will likely require additional binaries/daemons to manage the DNS API integration which would limit the viable methods. But we're keeping our options open for the moment.

                          Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                          Need help fast? Netgate Global Support!

                          Do not Chat/PM for help!

                          1 Reply Last reply Reply Quote 3
                          • J
                            JonathanLee @maverickws
                            last edited by JonathanLee Nov 8, 2023, 5:48 PM Nov 8, 2023, 5:47 PM

                            @maverickws said in KEA DHCP - lacking features:

                            DHCP option 26.
                            Also . . .

                            Option 252 WPAD
                            Option 42 NTP
                            Option 3 Gateway
                            Option 6 DNS

                            Make sure to upvote

                            M 1 Reply Last reply Nov 8, 2023, 5:50 PM Reply Quote 2
                            • M
                              mcury @JonathanLee
                              last edited by Nov 8, 2023, 5:50 PM

                              @JonathanLee said in KEA DHCP - lacking features:

                              @maverickws said in KEA DHCP - lacking features:

                              DHCP option 26.
                              Also . . .

                              Option 252 WPAD
                              Option 42 NTP
                              Option 3 Gateway
                              Option 6 DNS

                              I only use DHCP 43, I use it to adopt Unifi switch Mini to Unifi controller, but since it is already adopted, I don't need it anymore, so I'm already testing KEA and so far, so good..

                              dead on arrival, nowhere to be found.

                              1 Reply Last reply Reply Quote 3
                              • M
                                maverickws
                                last edited by Nov 8, 2023, 5:52 PM

                                I guess we'll end up realising that there are more users using "advanced" options that initially thought.

                                R 1 Reply Last reply Nov 8, 2023, 5:57 PM Reply Quote 3
                                • R
                                  RobbieTT @maverickws
                                  last edited by Nov 8, 2023, 5:57 PM

                                  Option 6 was the first one I noticed. Missing Option 42 was ok as everything I currently have points to an internal IP address.

                                  ☕️

                                  J M 3 Replies Last reply Nov 8, 2023, 6:00 PM Reply Quote 1
                                  • J
                                    JonathanLee @RobbieTT
                                    last edited by Nov 8, 2023, 6:00 PM

                                    @RobbieTT do you also use 252 for wpad?

                                    Make sure to upvote

                                    R 1 Reply Last reply Nov 8, 2023, 6:35 PM Reply Quote 0
                                    • M
                                      maverickws @RobbieTT
                                      last edited by Nov 8, 2023, 6:14 PM

                                      @RobbieTT have to ask, why manually adding option 6 instead of using the section under DHCP Server:
                                      Server Options > DNS Servers ?

                                      I actually only use this when using high availability in order to put the VIP address there, but works fine tho.

                                      1 Reply Last reply Reply Quote 0
                                      • R
                                        RobbieTT @JonathanLee
                                        last edited by Nov 8, 2023, 6:35 PM

                                        @JonathanLee said in KEA DHCP - lacking features:

                                        @RobbieTT do you also use 252 for wpad?

                                        Not currently, at least not on my home network. I don't think I have anything looking for wpad.

                                        @maverickws said in KEA DHCP - lacking features:

                                        @RobbieTT have to ask, why manually adding option 6 instead of using the section under DHCP Server:
                                        Server Options > DNS Servers ?

                                        I'm not sure I understand you?

                                        ☕️

                                        M 1 Reply Last reply Nov 8, 2023, 7:02 PM Reply Quote 0
                                        • M
                                          maverickws @RobbieTT
                                          last edited by Nov 8, 2023, 7:02 PM

                                          @RobbieTT when you configure the DHCP Service you go to

                                          Services (Top Menu) > DHCP Server
                                          Then you get the different interfaces where you're able to activate (enable) the DHCP Server service, correct?

                                          When in here, you have a few configuration blocks:

                                          "General DHCP Options"
                                          "Primary Address Pool"
                                          "Server Options"
                                          "Other DHCP Options" (where we'd configure the extra DHCP options)

                                          The "Server Options" block here already asks for DNS Servers, which correspond to DHCP option 6.

                                          So, on normal operation I leave this blank and let the interface address be the DNS server (as I'm using unbound resolver, so the firewall is the DNS server).
                                          On situations where HA is enabled, I put the shared virtual IP here.
                                          So my question is, why adding manually option 6 with the DNS servers, instead of using the DNS Servers fields under "Server Options". Like could be a specific case and I was curious.

                                          R 1 Reply Last reply Nov 8, 2023, 7:18 PM Reply Quote 0
                                          14 out of 60
                                          • First post
                                            14/60
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.