• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

DHCP restriction problem

Scheduled Pinned Locked Moved DHCP and DNS
3 Posts 2 Posters 959 Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • W
    wolfsden3
    last edited by wolfsden3 Jul 20, 2021, 5:43 PM Jul 20, 2021, 5:17 PM

    I'm trying to deny mac addresses from one pool & allow them to another pool that's on a vlan siting on the LAN interface (maybe that's my problem as I didn't use an "opt" physical interface). As soon as I put in the deny for the first part of the mac 805EC0 the service crashes and no longer offers addresses on that LAN interface or the vlan interface.

    I'm farting around with settings but not having much luck. I even tried the 132 option on the LAN interface to tell it that the phone (Yealink) is on vlan 10 but so far a no go.

    Is there something wrong with the DHCP server config on PFSense? I'm on the latest beta :-)

    Jul 20 13:08:40 	dhcpd 	63467 	process and the information we find helpful for debugging.
    Jul 20 13:08:40 	dhcpd 	63467 	before submitting a bug. These pages explain the proper
    Jul 20 13:08:40 	dhcpd 	63467 	bugs on either our web page at www.isc.org or in the README file
    Jul 20 13:08:40 	dhcpd 	63467 	than a configuration issue please read the section on submitting
    Jul 20 13:08:40 	dhcpd 	63467 	If you think you have received this message due to a bug rather
    Jul 20 13:08:40 	dhcpd 	63467 	Configuration file errors encountered -- exiting
    Jul 20 13:08:40 	dhcpd 	63467 	one range statement.
    Jul 20 13:08:40 	dhcpd 	63467 	Pool declarations must always contain at least
    Jul 20 13:08:40 	dhcpd 	63467 	^
    Jul 20 13:08:40 	dhcpd 	63467 	}
    Jul 20 13:08:40 	dhcpd 	63467 	/etc/dhcpd.conf line 27: Pool declaration with no address range.
    Jul 20 13:08:40 	dhcpd 	63467 	^
    Jul 20 13:08:40 	dhcpd 	63467 	ignore members of "805EC0";
    Jul 20 13:08:40 	dhcpd 	63467 	/etc/dhcpd.conf line 24: expecting a parameter or declaration 
    

    The thing that seems to crash this is when I tick this option on the web interface!

    Ignore denied clients
    
    Denied clients will be ignored rather than rejected. This option is not compatible with failover and cannot be enabled when a Failover Peer IP address is configured
    

    After I ticket that and click save > crashes the DHCP service with the above configuration file errors.

    S 1 Reply Last reply Mar 9, 2022, 4:41 PM Reply Quote 0
    • S
      SteveITS Galactic Empire @wolfsden3
      last edited by Mar 9, 2022, 4:41 PM

      @wolfsden3 Arg, we just discovered this as well.
      It logs:
      Mar 9 10:16:06 dhcpd 7135 ^
      Mar 9 10:16:06 dhcpd 7135 ignore members of "c81f6640c544";
      Mar 9 10:16:06 dhcpd 7135 /etc/dhcpd.conf line 22: expecting a parameter or declaration
      Mar 9 10:16:06 dhcpd 7135 ^

      pool {
      	ignore members of "c81f664xxxxx"; <-- line 22
      	ignore unknown-clients;
      
      	range 10.x.x.30 10.x.x.39;
      }
      

      Unchecking that option changes it to
      deny members of "c81f664xxxxx";
      deny unknown-clients;

      ...and the service starts fine.

      If I remove "c81f664xxxxx" from the MAC Deny list, and check that checkbox, that line isn't there and the service starts fine.

      Redmine issue.

      Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
      When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
      Upvote 👍 helpful posts!

      1 Reply Last reply Reply Quote 0
      • S
        SteveITS Galactic Empire
        last edited by Mar 10, 2022, 3:29 PM

        Patch was posted to the Redmine, to apply via the patch ID in System Patches package.

        Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
        When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
        Upvote 👍 helpful posts!

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
          This community forum collects and processes your personal information.
          consent.not_received