Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Upgraded to 2.7.2 today...DHCP and DHCPv6 are No longer working...

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    18 Posts 3 Posters 2.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • bearhntrB
      bearhntr @bearhntr
      last edited by

      I think I have fixed it...

      It appears that the 2.7.2. upgrade changed this setting:

      18e56897-eb27-44f0-88a6-dd9b9d5fc53c-image.png

      To this:

      529f5e11-593a-44fd-b5b7-3cfea528b895-image.png

      The upgrade had to have made this change - as I rarely ever got into DHCP settings for either protocol.

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Hmm, what did you upgrade from?

        bearhntrB 1 Reply Last reply Reply Quote 0
        • bearhntrB
          bearhntr @stephenw10
          last edited by

          @stephenw10

          2.7.1 >> 2.7.2

          Dashboard had been prompting me for about a week that 2.7.2 was released.

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Hmm, and you were already running Kea there?

            bearhntrB 1 Reply Last reply Reply Quote 1
            • bearhntrB
              bearhntr @stephenw10
              last edited by

              @stephenw10

              Indeed.

              I am now having other looksies and finding these White and Green arrows are not consistent. All of these with the RED - are ON, and ONLINE and I can ping them. But none of them will resolve in a DNS LOOKUP, which is quite ODD. They all used to. It appears that just about everything (unless it is a Windows box) no longer works in DNS LOOKUP from Diagnostics >> DNS Lookup (images below).

              7036532f-43f4-4490-8e8f-be6c5c4fe738-image.png

              This one is the pfSense - and I would expect it to work:

              478a1ad8-a9eb-4ea7-959e-06494043d7cc-image.png

              This one - however does not (it is ONLINE):

              eb1c0c9c-cf92-4701-967e-9ef35c3edc11-image.png

              but from it's Terminal screen I can ping pfSense and it resolves them:

              bfc395d9-198c-4154-bd4e-e7de2aed7682-image.png

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                The arrow colour there just reflects the state in the ARP table. So if that host hasn't sent or received any routed traffic recently it may show as down.

                Kea cannot currently add dhcp hostnames to the DNS resolver so they cannot be resolved like that. If you need to be able to resolve dynamic hostnames you should sitch back to the ISC DHCP server for now.

                bearhntrB 1 Reply Last reply Reply Quote 1
                • bearhntrB
                  bearhntr @stephenw10
                  last edited by

                  @stephenw10

                  Are there steps to change it back from KEA? or do we know when it will be fixed?

                  Thanks for all your assistance.

                  S 1 Reply Last reply Reply Quote 0
                  • S
                    SteveITS Galactic Empire @bearhntr
                    last edited by

                    @bearhntr see the paragraph under the orange here: https://docs.netgate.com/pfsense/en/latest/releases/2-7-1.html#kea-dhcp-server-feature-preview-now-available

                    Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                    When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                    Upvote ๐Ÿ‘ helpful posts!

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      You can just switch back. There shouldn't be anything else required.

                      Yeah Kea is not technically broken it just doesn't have that feature yet.

                      bearhntrB 1 Reply Last reply Reply Quote 0
                      • bearhntrB
                        bearhntr @stephenw10
                        last edited by

                        @stephenw10

                        OK...made the switch and even rebooted. Got some more GREEN Arrows - still not all accurate as to ONLINE servers - but I guess I just wait.

                        Still does not DNS resolve names for existing DHCP reservations into IP. Still getting this error (does same with FQDN or just Hostname):

                        c3be8b34-7739-4ab7-9a22-7405b8215567-image.png

                        e7737ded-372c-4a8e-b7fe-c823e15a0d00-image.png

                        In fact even cleared the ARP table - and it immediately rebuilt - and nothing resolves except the pfsense

                        c779fe53-c1c5-4d06-88e0-184b7c108231-image.png

                        ๐Ÿ˜• Me soooooo - cornfuzed

                        S 1 Reply Last reply Reply Quote 0
                        • S
                          SteveITS Galactic Empire @bearhntr
                          last edited by

                          @bearhntr I'd guess you need to wait for a lease renewal on the device, so the IP is added to unbound. Try restarting the device, or unplug/reconnect.

                          Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                          When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                          Upvote ๐Ÿ‘ helpful posts!

                          1 Reply Last reply Reply Quote 1
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            Your firewall and the dhcp clients share the same domain I assume?

                            Can it resolve by fqdn?

                            bearhntrB 1 Reply Last reply Reply Quote 0
                            • bearhntrB
                              bearhntr @stephenw10
                              last edited by

                              @stephenw10

                              Yes...at the moment. pfSense is directly from Cable ISP - all traffic goes through it. It handles all DHCP and DNS, but is configured to FWD unknown DNS requests to CloudFlare (for IPv4 and IPv6).

                              FQDN does not resolve either.

                              af647f5c-f2a0-4777-a4b1-3070a55c0aa1-image.png

                              I will give another check tomorrow and see if the expirations have occurred and it then works.

                              1 Reply Last reply Reply Quote 0
                              • stephenw10S
                                stephenw10 Netgate Administrator
                                last edited by

                                Hmm, do you have 'DHCP Registration' enabled in the DNS Resolver config? You might try resaving the resolver settings to restart the dhcpleases script that updates the hosts.

                                bearhntrB 2 Replies Last reply Reply Quote 0
                                • bearhntrB
                                  bearhntr @stephenw10
                                  last edited by

                                  @stephenw10

                                  They were 'checked' - I unchecked, and SAVED, then re-checked and SAVED

                                  df74b2e3-e51e-4fd7-b25b-834dfbea15e2-image.png

                                  ....annnnnnd lookie there, already working:

                                  4e3e912a-bf8f-446f-9f66-804fa6f065c9-image.png

                                  bearhntrB 1 Reply Last reply Reply Quote 1
                                  • bearhntrB
                                    bearhntr @bearhntr
                                    last edited by

                                    Guess it will take a while for the IPv6 to pick it up.

                                    1 Reply Last reply Reply Quote 0
                                    • bearhntrB
                                      bearhntr @stephenw10
                                      last edited by

                                      @stephenw10

                                      Do you by chance have any advice on this one?

                                      'pooling' port and vLANs

                                      1 Reply Last reply Reply Quote 0
                                      • First post
                                        Last post
                                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.