Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    DHCP via wrong network

    Scheduled Pinned Locked Moved DHCP and DNS
    3 Posts 2 Posters 2.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • G
      gjaltemba
      last edited by

      I plugged a cable into a wrong switch port and some clients ended up with dhcp leases from the wrong network. The gateway and dns assigned by dhcp were useless. Things got back on track once I plugged the cable into a proper port.

      Is there a way dhcpd not to dhcpoffer to clients via wrong network?

      Looking at the opt1 dhcpd log entries looks like this in pseudo code

      dhcpdiscover client mac via opt1
      dhcpnak on ip of wrong subnet  to client mac via opt1
      dhcprequest for ip of wrong subnet from client mac via opt1:wrong network
      dhcpoffer on ip from opt1 pool to client mac(client hostname) via opt1

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        A dhcp can be set to nak or not a request to renew an IP that it is not authoritative for..

        So your saying you don't want your dhcpd to nak requests for IPs that are wrong?  This can cause problems with clients that are moving from a different network - this can be a major issue with clients moving between wifi networks, and trying to renew their old IP.  Depending on the client if they do not get a renewal or a NAK that this is not the right network for that IP range they could continue to use that old IP until the lease fully expires and they send out a discover to get the IP on this network.

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • G
          gjaltemba
          last edited by

          The dhcp bleed out problem started when I accidentally connected untagged vlan 100 port to untagged vlan 200 port. Maybe I should try tagged ports to prevent dhcp requests going to a foreign subnet.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.