Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Upgraded to 2.7.2 today...DHCP and DHCPv6 are No longer working...

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    18 Posts 3 Posters 2.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      Hmm, and you were already running Kea there?

      bearhntrB 1 Reply Last reply Reply Quote 1
      • bearhntrB
        bearhntr @stephenw10
        last edited by

        @stephenw10

        Indeed.

        I am now having other looksies and finding these White and Green arrows are not consistent. All of these with the RED - are ON, and ONLINE and I can ping them. But none of them will resolve in a DNS LOOKUP, which is quite ODD. They all used to. It appears that just about everything (unless it is a Windows box) no longer works in DNS LOOKUP from Diagnostics >> DNS Lookup (images below).

        7036532f-43f4-4490-8e8f-be6c5c4fe738-image.png

        This one is the pfSense - and I would expect it to work:

        478a1ad8-a9eb-4ea7-959e-06494043d7cc-image.png

        This one - however does not (it is ONLINE):

        eb1c0c9c-cf92-4701-967e-9ef35c3edc11-image.png

        but from it's Terminal screen I can ping pfSense and it resolves them:

        bfc395d9-198c-4154-bd4e-e7de2aed7682-image.png

        1 Reply Last reply Reply Quote 0
        • stephenw10S
          stephenw10 Netgate Administrator
          last edited by

          The arrow colour there just reflects the state in the ARP table. So if that host hasn't sent or received any routed traffic recently it may show as down.

          Kea cannot currently add dhcp hostnames to the DNS resolver so they cannot be resolved like that. If you need to be able to resolve dynamic hostnames you should sitch back to the ISC DHCP server for now.

          bearhntrB 1 Reply Last reply Reply Quote 1
          • bearhntrB
            bearhntr @stephenw10
            last edited by

            @stephenw10

            Are there steps to change it back from KEA? or do we know when it will be fixed?

            Thanks for all your assistance.

            S 1 Reply Last reply Reply Quote 0
            • S
              SteveITS Galactic Empire @bearhntr
              last edited by

              @bearhntr see the paragraph under the orange here: https://docs.netgate.com/pfsense/en/latest/releases/2-7-1.html#kea-dhcp-server-feature-preview-now-available

              Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
              When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
              Upvote ๐Ÿ‘ helpful posts!

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                You can just switch back. There shouldn't be anything else required.

                Yeah Kea is not technically broken it just doesn't have that feature yet.

                bearhntrB 1 Reply Last reply Reply Quote 0
                • bearhntrB
                  bearhntr @stephenw10
                  last edited by

                  @stephenw10

                  OK...made the switch and even rebooted. Got some more GREEN Arrows - still not all accurate as to ONLINE servers - but I guess I just wait.

                  Still does not DNS resolve names for existing DHCP reservations into IP. Still getting this error (does same with FQDN or just Hostname):

                  c3be8b34-7739-4ab7-9a22-7405b8215567-image.png

                  e7737ded-372c-4a8e-b7fe-c823e15a0d00-image.png

                  In fact even cleared the ARP table - and it immediately rebuilt - and nothing resolves except the pfsense

                  c779fe53-c1c5-4d06-88e0-184b7c108231-image.png

                  ๐Ÿ˜• Me soooooo - cornfuzed

                  S 1 Reply Last reply Reply Quote 0
                  • S
                    SteveITS Galactic Empire @bearhntr
                    last edited by

                    @bearhntr I'd guess you need to wait for a lease renewal on the device, so the IP is added to unbound. Try restarting the device, or unplug/reconnect.

                    Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                    When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                    Upvote ๐Ÿ‘ helpful posts!

                    1 Reply Last reply Reply Quote 1
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      Your firewall and the dhcp clients share the same domain I assume?

                      Can it resolve by fqdn?

                      bearhntrB 1 Reply Last reply Reply Quote 0
                      • bearhntrB
                        bearhntr @stephenw10
                        last edited by

                        @stephenw10

                        Yes...at the moment. pfSense is directly from Cable ISP - all traffic goes through it. It handles all DHCP and DNS, but is configured to FWD unknown DNS requests to CloudFlare (for IPv4 and IPv6).

                        FQDN does not resolve either.

                        af647f5c-f2a0-4777-a4b1-3070a55c0aa1-image.png

                        I will give another check tomorrow and see if the expirations have occurred and it then works.

                        1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by

                          Hmm, do you have 'DHCP Registration' enabled in the DNS Resolver config? You might try resaving the resolver settings to restart the dhcpleases script that updates the hosts.

                          bearhntrB 2 Replies Last reply Reply Quote 0
                          • bearhntrB
                            bearhntr @stephenw10
                            last edited by

                            @stephenw10

                            They were 'checked' - I unchecked, and SAVED, then re-checked and SAVED

                            df74b2e3-e51e-4fd7-b25b-834dfbea15e2-image.png

                            ....annnnnnd lookie there, already working:

                            4e3e912a-bf8f-446f-9f66-804fa6f065c9-image.png

                            bearhntrB 1 Reply Last reply Reply Quote 1
                            • bearhntrB
                              bearhntr @bearhntr
                              last edited by

                              Guess it will take a while for the IPv6 to pick it up.

                              1 Reply Last reply Reply Quote 0
                              • bearhntrB
                                bearhntr @stephenw10
                                last edited by

                                @stephenw10

                                Do you by chance have any advice on this one?

                                'pooling' port and vLANs

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.