Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Upgraded to 2.7.2 today...DHCP and DHCPv6 are No longer working...

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    18 Posts 3 Posters 2.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • bearhntrB
      bearhntr @stephenw10
      last edited by

      @stephenw10

      2.7.1 >> 2.7.2

      Dashboard had been prompting me for about a week that 2.7.2 was released.

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Hmm, and you were already running Kea there?

        bearhntrB 1 Reply Last reply Reply Quote 1
        • bearhntrB
          bearhntr @stephenw10
          last edited by

          @stephenw10

          Indeed.

          I am now having other looksies and finding these White and Green arrows are not consistent. All of these with the RED - are ON, and ONLINE and I can ping them. But none of them will resolve in a DNS LOOKUP, which is quite ODD. They all used to. It appears that just about everything (unless it is a Windows box) no longer works in DNS LOOKUP from Diagnostics >> DNS Lookup (images below).

          7036532f-43f4-4490-8e8f-be6c5c4fe738-image.png

          This one is the pfSense - and I would expect it to work:

          478a1ad8-a9eb-4ea7-959e-06494043d7cc-image.png

          This one - however does not (it is ONLINE):

          eb1c0c9c-cf92-4701-967e-9ef35c3edc11-image.png

          but from it's Terminal screen I can ping pfSense and it resolves them:

          bfc395d9-198c-4154-bd4e-e7de2aed7682-image.png

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            The arrow colour there just reflects the state in the ARP table. So if that host hasn't sent or received any routed traffic recently it may show as down.

            Kea cannot currently add dhcp hostnames to the DNS resolver so they cannot be resolved like that. If you need to be able to resolve dynamic hostnames you should sitch back to the ISC DHCP server for now.

            bearhntrB 1 Reply Last reply Reply Quote 1
            • bearhntrB
              bearhntr @stephenw10
              last edited by

              @stephenw10

              Are there steps to change it back from KEA? or do we know when it will be fixed?

              Thanks for all your assistance.

              S 1 Reply Last reply Reply Quote 0
              • S
                SteveITS Galactic Empire @bearhntr
                last edited by

                @bearhntr see the paragraph under the orange here: https://docs.netgate.com/pfsense/en/latest/releases/2-7-1.html#kea-dhcp-server-feature-preview-now-available

                Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                Upvote ๐Ÿ‘ helpful posts!

                1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  You can just switch back. There shouldn't be anything else required.

                  Yeah Kea is not technically broken it just doesn't have that feature yet.

                  bearhntrB 1 Reply Last reply Reply Quote 0
                  • bearhntrB
                    bearhntr @stephenw10
                    last edited by

                    @stephenw10

                    OK...made the switch and even rebooted. Got some more GREEN Arrows - still not all accurate as to ONLINE servers - but I guess I just wait.

                    Still does not DNS resolve names for existing DHCP reservations into IP. Still getting this error (does same with FQDN or just Hostname):

                    c3be8b34-7739-4ab7-9a22-7405b8215567-image.png

                    e7737ded-372c-4a8e-b7fe-c823e15a0d00-image.png

                    In fact even cleared the ARP table - and it immediately rebuilt - and nothing resolves except the pfsense

                    c779fe53-c1c5-4d06-88e0-184b7c108231-image.png

                    ๐Ÿ˜• Me soooooo - cornfuzed

                    S 1 Reply Last reply Reply Quote 0
                    • S
                      SteveITS Galactic Empire @bearhntr
                      last edited by

                      @bearhntr I'd guess you need to wait for a lease renewal on the device, so the IP is added to unbound. Try restarting the device, or unplug/reconnect.

                      Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                      When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                      Upvote ๐Ÿ‘ helpful posts!

                      1 Reply Last reply Reply Quote 1
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        Your firewall and the dhcp clients share the same domain I assume?

                        Can it resolve by fqdn?

                        bearhntrB 1 Reply Last reply Reply Quote 0
                        • bearhntrB
                          bearhntr @stephenw10
                          last edited by

                          @stephenw10

                          Yes...at the moment. pfSense is directly from Cable ISP - all traffic goes through it. It handles all DHCP and DNS, but is configured to FWD unknown DNS requests to CloudFlare (for IPv4 and IPv6).

                          FQDN does not resolve either.

                          af647f5c-f2a0-4777-a4b1-3070a55c0aa1-image.png

                          I will give another check tomorrow and see if the expirations have occurred and it then works.

                          1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            Hmm, do you have 'DHCP Registration' enabled in the DNS Resolver config? You might try resaving the resolver settings to restart the dhcpleases script that updates the hosts.

                            bearhntrB 2 Replies Last reply Reply Quote 0
                            • bearhntrB
                              bearhntr @stephenw10
                              last edited by

                              @stephenw10

                              They were 'checked' - I unchecked, and SAVED, then re-checked and SAVED

                              df74b2e3-e51e-4fd7-b25b-834dfbea15e2-image.png

                              ....annnnnnd lookie there, already working:

                              4e3e912a-bf8f-446f-9f66-804fa6f065c9-image.png

                              bearhntrB 1 Reply Last reply Reply Quote 1
                              • bearhntrB
                                bearhntr @bearhntr
                                last edited by

                                Guess it will take a while for the IPv6 to pick it up.

                                1 Reply Last reply Reply Quote 0
                                • bearhntrB
                                  bearhntr @stephenw10
                                  last edited by

                                  @stephenw10

                                  Do you by chance have any advice on this one?

                                  'pooling' port and vLANs

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.