Duplicate DHCP Leases?

[doktornotor]

This (Diagnostics => Command Prompt) provides a pretty readable overview of what's configured where

foreach ($config['dhcpd'] as $iface => $leases) {
	$ifname = convert_real_interface_to_friendly_interface_name($iface);
	$ifname = convert_friendly_interface_to_friendly_descr($ifname);
   	echo "Static leases on $ifname ($iface):\n";
	print_r($leases['staticmap']);
}

however since all this information is top secret classified stuff, we won't ever get the output anyway…

[johnpoz]

That is pretty slick dok!  And would be very informative to see that output.. But like you said its all top secret.. The black helicopters are most likely circling our houses now for even seeing the redacted output he did post ;) heheeh

[wharris623]

After going back and looking at my upload, I captured the same screen shot twice and for that I apologize.  Please look at these two unedited screen captures.

As for Dok, you can be the smartest guy on the planet but if you can't interface with people you aren't going to get anywhere.  Especially when you are trying to help.  I work in the customer support industry as do most of us on this forum I'm sure.  I have peers who can't relate nor talk to customers and then I have those peers who can.  Those who can communicate and discuss issues with customers/client get higher marks and survey results and are much more respected by their clients and management then those who can't.

Not trying to slam you but just making an observation.  You can catch more flys with honey then you do with vinegar.

.JPG)
.JPG_thumb)

[doktornotor]

What's up with that VLAN1_DBM_PC? It's not assigned, or what?

[wharris623]

It is assigned.  What I was attempting to point out was the blank interface at the top.

[johnpoz]

Ok that is weird, how come its not showing the interface its on in the top menu?

Don't you DARE try to change dok's style!!  I agree many of here most likely work in the tech sector and have to put up with customers.. And have to play all nicey nice, etc.  When most of the time you just want to scream through the phone listen up you F'ing Moron.. I can not make it any more clear.. Did you finish 3rd grade? ;)

The nice thing about public forums - is you don't have to pretend your talking to a 13 year old girl on her first period.  You can be straight and to the point, and hopefully the other person is another techy person and gets it, etc..

I find Dok's posts refreshing and fun to read, you can only slap so much perfume on a pile of shit.. Its still going to be a pile of shit.. So its nice to communicate and exchange information without all the freaking honey and perfume stinking up the place.  If its shit, then its shit - but atleast you know what your dealing with ;)

[wharris623]

JohnPoz, I wish I knew why but I don't.  Been blowing my mind though.  I think that relates to the root of my issue.

[doktornotor]

So are they shown under the proper interface when using the above script?

[wharris623]

I did try the above script but no I do not see those entries under any interface.  Which is what's throwing me for a loop.

[doktornotor]

Well, then look at the config.xml. Your configuration just appears badly broken somewhere.

[johnpoz]

If they are getting put back on reboot.. Then they HAVE to be in the config xml..  But yeah I would look to see what is causing your dhcp servers static to not show its interface.

[wharris623]

So looking at the config.xml for the DHCP section, which BTW: is very cool you can download specific sections (thanks doktornotor), I think I found a clue.

There is a <lan>section, <opt1>section, <opt3>section, and <opt4>section. . .

The ranges for <lan>and <opt1>are NOT exclusive, which I'm not sure how this could be the case.  (Full disclosure I inherited this and it's sister box from another tech guy)

Those phantom entries which I cannot remove from the gui are under the <opt1>section, the static entries which are in the <lan>section are under the range that is showing up in the gui.

So since this is a production box, my question becomes, can I just remove that <opt1>section from the downloaded xml file and then upload it to the pfsense installation and in theory everything would work?</opt1></lan></opt1></opt1></lan></opt4></opt3></opt1></lan>

[johnpoz]

I don't recall dok showing you that you could download different sections - that was me ;) heheh

But yes you should be able to delete the sections you don't want and then restore that portion of the xml.

[wharris623]

Sorry johnpoz, that's my bad!  Thank you for showing me that!  Can't say I ever really bothered clicking on the drop down cause I always wanted to do a full backup!

So, I think I found a clue to all of this.  There are two interfaces that have the same IP on them.  LAN_EM1_DBM and VLAN1_DBM_PC.  I'm willing to bet my predecessor didn't realize that the default vlan is 1 and didn't have to carve out a seperate vlan1.  So the <lan>interface is really LAN_EM1_DBM and <opt1>is really VLAN1_DBM_PC.  I'm betting if I remove VLAN1_DBM_PC from VLAN and delete the interface everything should keep using LAN_EM1_DBM and that would remove the ghost entry from DHCP Services which would make the behavior of STATUS DHCP correct.  What do you think?</opt1></lan>

[wharris623]

So that was the issue.  Because the vlan1 was assigned as an interface it had a dhcp server that was running a conflicting set of pools for the 192.168.0.x address range which there was already a DHCP server running for LAN_EM1_DBM (which is another interface).

HUGE HUGE HUGE Props to Johnpoz for taking the time and working thru this with me.

Thank you to doktornotor for trying to help me, even though we never really did reach a level of communication.

I've said it before, and I'll say it again.  pfSense is a great product!  Just works and works well.

Thanks for all the help everyone!