Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Upgraded to 2.7.2 today...DHCP and DHCPv6 are No longer working...

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    18 Posts 3 Posters 2.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • bearhntrB
      bearhntr @stephenw10
      last edited by

      @stephenw10

      Indeed.

      I am now having other looksies and finding these White and Green arrows are not consistent. All of these with the RED - are ON, and ONLINE and I can ping them. But none of them will resolve in a DNS LOOKUP, which is quite ODD. They all used to. It appears that just about everything (unless it is a Windows box) no longer works in DNS LOOKUP from Diagnostics >> DNS Lookup (images below).

      7036532f-43f4-4490-8e8f-be6c5c4fe738-image.png

      This one is the pfSense - and I would expect it to work:

      478a1ad8-a9eb-4ea7-959e-06494043d7cc-image.png

      This one - however does not (it is ONLINE):

      eb1c0c9c-cf92-4701-967e-9ef35c3edc11-image.png

      but from it's Terminal screen I can ping pfSense and it resolves them:

      bfc395d9-198c-4154-bd4e-e7de2aed7682-image.png

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        The arrow colour there just reflects the state in the ARP table. So if that host hasn't sent or received any routed traffic recently it may show as down.

        Kea cannot currently add dhcp hostnames to the DNS resolver so they cannot be resolved like that. If you need to be able to resolve dynamic hostnames you should sitch back to the ISC DHCP server for now.

        bearhntrB 1 Reply Last reply Reply Quote 1
        • bearhntrB
          bearhntr @stephenw10
          last edited by

          @stephenw10

          Are there steps to change it back from KEA? or do we know when it will be fixed?

          Thanks for all your assistance.

          S 1 Reply Last reply Reply Quote 0
          • S
            SteveITS Galactic Empire @bearhntr
            last edited by

            @bearhntr see the paragraph under the orange here: https://docs.netgate.com/pfsense/en/latest/releases/2-7-1.html#kea-dhcp-server-feature-preview-now-available

            Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
            When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
            Upvote ๐Ÿ‘ helpful posts!

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              You can just switch back. There shouldn't be anything else required.

              Yeah Kea is not technically broken it just doesn't have that feature yet.

              bearhntrB 1 Reply Last reply Reply Quote 0
              • bearhntrB
                bearhntr @stephenw10
                last edited by

                @stephenw10

                OK...made the switch and even rebooted. Got some more GREEN Arrows - still not all accurate as to ONLINE servers - but I guess I just wait.

                Still does not DNS resolve names for existing DHCP reservations into IP. Still getting this error (does same with FQDN or just Hostname):

                c3be8b34-7739-4ab7-9a22-7405b8215567-image.png

                e7737ded-372c-4a8e-b7fe-c823e15a0d00-image.png

                In fact even cleared the ARP table - and it immediately rebuilt - and nothing resolves except the pfsense

                c779fe53-c1c5-4d06-88e0-184b7c108231-image.png

                ๐Ÿ˜• Me soooooo - cornfuzed

                S 1 Reply Last reply Reply Quote 0
                • S
                  SteveITS Galactic Empire @bearhntr
                  last edited by

                  @bearhntr I'd guess you need to wait for a lease renewal on the device, so the IP is added to unbound. Try restarting the device, or unplug/reconnect.

                  Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                  When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                  Upvote ๐Ÿ‘ helpful posts!

                  1 Reply Last reply Reply Quote 1
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    Your firewall and the dhcp clients share the same domain I assume?

                    Can it resolve by fqdn?

                    bearhntrB 1 Reply Last reply Reply Quote 0
                    • bearhntrB
                      bearhntr @stephenw10
                      last edited by

                      @stephenw10

                      Yes...at the moment. pfSense is directly from Cable ISP - all traffic goes through it. It handles all DHCP and DNS, but is configured to FWD unknown DNS requests to CloudFlare (for IPv4 and IPv6).

                      FQDN does not resolve either.

                      af647f5c-f2a0-4777-a4b1-3070a55c0aa1-image.png

                      I will give another check tomorrow and see if the expirations have occurred and it then works.

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        Hmm, do you have 'DHCP Registration' enabled in the DNS Resolver config? You might try resaving the resolver settings to restart the dhcpleases script that updates the hosts.

                        bearhntrB 2 Replies Last reply Reply Quote 0
                        • bearhntrB
                          bearhntr @stephenw10
                          last edited by

                          @stephenw10

                          They were 'checked' - I unchecked, and SAVED, then re-checked and SAVED

                          df74b2e3-e51e-4fd7-b25b-834dfbea15e2-image.png

                          ....annnnnnd lookie there, already working:

                          4e3e912a-bf8f-446f-9f66-804fa6f065c9-image.png

                          bearhntrB 1 Reply Last reply Reply Quote 1
                          • bearhntrB
                            bearhntr @bearhntr
                            last edited by

                            Guess it will take a while for the IPv6 to pick it up.

                            1 Reply Last reply Reply Quote 0
                            • bearhntrB
                              bearhntr @stephenw10
                              last edited by

                              @stephenw10

                              Do you by chance have any advice on this one?

                              'pooling' port and vLANs

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.