Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Trouble with DHCP and Static ARP

    Scheduled Pinned Locked Moved
    DHCP and DNS
    2
    7
    6.6k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      Johnny_B
      last edited by

      My network…
      WAN
      LAN, 10.0.0.3/24
      Wifi, 10.0.1.1/24

      I have this because I wish different rules on the two networks. LAN and Wifi are not psysically seperated, they are the in the same network, but the teachers are connected through wires and have a IP in the LAN range, and the Wifi ones are on Wifi (Access Points, Linksys WAP54G mostly) and have IP in the Wifi range. This is done by static mapping the adresse in DHCP and Static ARP entries. So if a student wants to connect to the network I have to add his/her computer in the list identified by the MAC adresse. Like...

      00:00:00:00:00:01 -> 10.0.1.10

      The problem is that some clients, usually wired Windows machines (we have Mac and Windows) don't get their IP from the DHCP server, but if I type it in manually it works perfect. All the wired Macs works this way, no PC does. But wireless both Windows and Mac gets IP, with some few exceptions.

      They do get IP, but not the one they are suppose to have. I have dummy range to get the DHCP server to work, with no static mapping to this adresse. 10.0.0.255-10.0.0.255 and  10.0.1.255-10.0.1.255. So they get one of these adresses instead of the ones I have assigned to their MAC.

      1 Reply Last reply Reply Quote 0
      • M
        mbedyn
        last edited by

        In wireless  clinent, this could  happen because Acces Point do not pass through MAC addresess correclty.
        IMHO of course :-\

        1 Reply Last reply Reply Quote 0
        • J
          Johnny_B
          last edited by

          But I have almost none troubles with the wireless ones. I have troubles with the wired ones :) And only in Windows, not Mac OS X.

          1 Reply Last reply Reply Quote 0
          • M
            mbedyn
            last edited by

            hmm It is strange thing..
            Could You paste your DHCP config here? So we can analyze it what is wrong.

            regards
            Michael

            1 Reply Last reply Reply Quote 0
            • J
              Johnny_B
              last edited by 

              option domain-name ""; // removed for viewing here
default-lease-time 7200;
max-lease-time 86400;
authoritative;
log-facility local7;
ddns-update-style none;
one-lease-per-client true;
deny duplicates;
subnet 10.0.0.0 netmask 255.255.255.0 {
	pool {
		option domain-name-servers 10.0.0.1;
		deny unknown clients;
		range 10.0.0.255 10.0.0.255;
	}
	option routers 10.0.0.3;
	option domain-name-servers 10.0.0.1;
}
host s_lan_0 {
	hardware ethernet 00:0a:95:71:b2:6a;
	fixed-address 10.0.0.1;
}
host s_lan_1 {
	hardware ethernet 00:30:65:b4:e6:0a;
	fixed-address 10.0.0.2;
}
host s_lan_2 {
	hardware ethernet 00:10:b5:40:1d:17;
	fixed-address 10.0.0.4;
}
host s_lan_3 {
	hardware ethernet 00:18:6e:06:7e:e8;
	fixed-address 10.0.0.10;
}
host s_lan_4 {
	hardware ethernet 00:20:6b:56:11:a8;
	fixed-address 10.0.0.11;
}
host s_lan_5 {
	hardware ethernet 00:00:aa:5c:7e:32;
	fixed-address 10.0.0.12;
}
host s_lan_6 {
	hardware ethernet 00:00:aa:8c:e5:34;
	fixed-address 10.0.0.13;
}
host s_lan_7 {
	hardware ethernet 00:00:00:00:00:05;
	fixed-address 10.0.0.14;
}
host s_lan_8 {
	hardware ethernet 00:10:83:2c:5a:25;
	fixed-address 10.0.0.15;
}
host s_lan_9 {
	hardware ethernet 00:03:93:1e:80:fc;
	fixed-address 10.0.0.31;
}
host s_lan_10 {
	hardware ethernet 00:03:93:43:de:a0;
	fixed-address 10.0.0.32;
}
host s_lan_11 {
	hardware ethernet 00:30:65:73:be:6a;
	fixed-address 10.0.0.33;
}
host s_lan_12 {
	hardware ethernet 00:30:65:66:67:dc;
	fixed-address 10.0.0.34;
}
host s_lan_13 {
	hardware ethernet 00:30:65:81:f1:dc;
	fixed-address 10.0.0.35;
}
host s_lan_14 {
	hardware ethernet 00:30:65:66:df:a4;
	fixed-address 10.0.0.36;
}
host s_lan_15 {
	hardware ethernet 00:30:65:81:f1:d8;
	fixed-address 10.0.0.37;
}
host s_lan_16 {
	hardware ethernet 00:30:65:82:8b:ea;
	fixed-address 10.0.0.38;
}
host s_lan_17 {
	hardware ethernet 00:0a:27:95:eb:de;
	fixed-address 10.0.0.39;
}
host s_lan_18 {
	hardware ethernet 00:30:65:50:4b:80;
	fixed-address 10.0.0.40;
}
host s_lan_19 {
	hardware ethernet 00:0a:95:6f:c1:14;
	fixed-address 10.0.0.46;
}
host s_lan_20 {
	hardware ethernet 00:0d:93:3c:f5:38;
	fixed-address 10.0.0.47;
}
host s_lan_21 {
	hardware ethernet 00:0a:95:d2:69:54;
	fixed-address 10.0.0.48;
}
host s_lan_22 {
	hardware ethernet 00:03:93:9c:3d:ce;
	fixed-address 10.0.0.49;
}
host s_lan_23 {
	hardware ethernet 00:0d:93:71:5e:28;
	fixed-address 10.0.0.50;
}
host s_lan_24 {
	hardware ethernet 00:0d:93:71:7c:94;
	fixed-address 10.0.0.51;
}
host s_lan_25 {
	hardware ethernet 00:0d:93:71:7b:18;
	fixed-address 10.0.0.52;
}
host s_lan_26 {
	hardware ethernet 00:0d:93:41:ff:66;
	fixed-address 10.0.0.53;
}
host s_lan_27 {
	hardware ethernet 00:0d:93:36:76:18;
	fixed-address 10.0.0.54;
}
host s_lan_28 {
	hardware ethernet 00:0d:93:34:f6:96;
	fixed-address 10.0.0.55;
}
host s_lan_29 {
	hardware ethernet 00:16:cb:cb:fb:51;
	fixed-address 10.0.0.71;
}
host s_lan_30 {
	hardware ethernet 00:16:cb:bd:36:48;
	fixed-address 10.0.0.72;
}
host s_lan_31 {
	hardware ethernet 00:16:6f:03:4e:02;
	fixed-address 10.0.0.73;
}
host s_lan_32 {
	hardware ethernet 00:0f:ea:ba:ae:0d;
	fixed-address 10.0.0.151;
}
host s_lan_33 {
	hardware ethernet 00:11:d8:83:53:aa;
	fixed-address 10.0.0.152;
}
host s_lan_34 {
	hardware ethernet 00:0e:35:1b:49:19;
	fixed-address 10.0.0.153;
}
host s_lan_35 {
	hardware ethernet 00:16:6f:7a:95:68;
	fixed-address 10.0.0.154;
}
host s_lan_36 {
	hardware ethernet 00:15:c5:ad:00:5d;
	fixed-address 10.0.0.155;
}
host s_lan_37 {
	hardware ethernet 00:13:02:d3:80:2c;
	fixed-address 10.0.0.156;
}
host s_lan_38 {
	hardware ethernet 00:16:d4:3d:23:77;
	fixed-address 10.0.0.157;
}
host s_lan_39 {
	hardware ethernet 00:0b:db:13:a0:bb;
	fixed-address 10.0.0.158;
}
host s_lan_40 {
	hardware ethernet 00:18:de:37:12:1a;
	fixed-address 10.0.0.159;
}
host s_lan_41 {
	hardware ethernet 00:17:3f:5c:7a:22;
	fixed-address 10.0.0.160;
}
host s_lan_42 {
	hardware ethernet 00:40:d0:a2:ba:89;
	fixed-address 10.0.0.161;
}
host s_lan_43 {
	hardware ethernet 00:03:93:18:eb:78;
	fixed-address 10.0.0.253;
}
host s_lan_44 {
	hardware ethernet 00:00:00:00:00:00;
	fixed-address 10.0.0.254;
}
host s_lan_45 {
	hardware ethernet 00:12:17:6b:1c:2d;
	fixed-address 10.0.1.5;
}
host s_lan_46 {
	hardware ethernet 00:16:b6:5a:bc:06;
	fixed-address 10.0.1.6;
}
host s_lan_47 {
	hardware ethernet 00:16:b6:5a:bc:c5;
	fixed-address 10.0.1.7;
}
host s_lan_48 {
	hardware ethernet 00:12:17:68:fc:fa;
	fixed-address 10.0.1.8;
}
host s_lan_49 {
	hardware ethernet 00:16:b6:93:dd:7b;
	fixed-address 10.0.1.9;
}
host s_lan_50 {
	hardware ethernet 00:18:39:03:18:f5;
	fixed-address 10.0.1.10;
}
host s_lan_51 {
	hardware ethernet 00:14:a5:66:b7:14;
	fixed-address 10.0.1.21;
}
host s_lan_52 {
	hardware ethernet 00:14:a5:65:b5:20;
	fixed-address 10.0.1.22;
}
host s_lan_53 {
	hardware ethernet 00:16:6f:91:96:5c;
	fixed-address 10.0.1.23;
}
host s_lan_54 {
	hardware ethernet 00:13:ce:ea:69:77;
	fixed-address 10.0.1.24;
}
host s_lan_55 {
	hardware ethernet 00:14:a5:bc:a3:f4;
	fixed-address 10.0.1.25;
}
host s_lan_56 {
	hardware ethernet 00:13:02:70:c7:38;
	fixed-address 10.0.1.26;
}
host s_lan_57 {
	hardware ethernet 00:0d:88:c8:26:a1;
	fixed-address 10.0.1.27;
}
host s_lan_58 {
	hardware ethernet 00:13:02:6b:ab:e7;
	fixed-address 10.0.1.28;
}
host s_lan_59 {
	hardware ethernet 00:02:a5:2e:8c:c3;
	fixed-address 10.0.1.29;
}
host s_lan_60 {
	hardware ethernet 00:0e:2e:5e:6e:09;
	fixed-address 10.0.1.30;
}
host s_lan_61 {
	hardware ethernet 00:16:6f:a3:35:7b;
	fixed-address 10.0.1.31;
}
host s_lan_62 {
	hardware ethernet 00:13:02:15:25:1a;
	fixed-address 10.0.1.32;
}
host s_lan_63 {
	hardware ethernet 00:0f:3d:aa:d5:ad;
	fixed-address 10.0.1.33;
}
host s_lan_64 {
	hardware ethernet 00:12:a9:c6:cf:f7;
	fixed-address 10.0.1.34;
}
host s_lan_65 {
	hardware ethernet 00:14:a5:e0:bd:78;
	fixed-address 10.0.1.35;
}
host s_lan_66 {
	hardware ethernet 00:0a:e4:20:e2:fb;
	fixed-address 10.0.1.36;
}
host s_lan_67 {
	hardware ethernet 00:16:cf:52:fa:9d;
	fixed-address 10.0.1.37;
}
host s_lan_68 {
	hardware ethernet 00:16:6f:16:59:be;
	fixed-address 10.0.1.38;
}
host s_lan_69 {
	hardware ethernet 00:14:a5:72:84:69;
	fixed-address 10.0.1.39;
}
host s_lan_70 {
	hardware ethernet 00:18:de:0a:b2:89;
	fixed-address 10.0.1.40;
}
host s_lan_71 {
	hardware ethernet 00:15:00:50:0b:1b;
	fixed-address 10.0.1.41;
}
host s_lan_72 {
	hardware ethernet 00:14:6c:32:0f:37;
	fixed-address 10.0.1.42;
}
host s_lan_73 {
	hardware ethernet 00:60:b3:fc:05:c3;
	fixed-address 10.0.1.43;
}
host s_lan_74 {
	hardware ethernet 00:90:4b:63:8c:90;
	fixed-address 10.0.1.44;
}
host s_lan_75 {
	hardware ethernet 00:13:ce:90:2a:6c;
	fixed-address 10.0.1.45;
}
host s_lan_76 {
	hardware ethernet 00:0e:35:6a:9c:f9;
	fixed-address 10.0.1.46;
}
host s_lan_77 {
	hardware ethernet 00:12:f0:99:d7:54;
	fixed-address 10.0.1.47;
}
host s_lan_78 {
	hardware ethernet 00:14:a5:6a:be:89;
	fixed-address 10.0.1.48;
}
host s_lan_79 {
	hardware ethernet 00:16:6f:94:f0:de;
	fixed-address 10.0.1.49;
}
host s_lan_80 {
	hardware ethernet 00:17:31:bf:1a:98;
	fixed-address 10.0.1.50;
}
host s_lan_81 {
	hardware ethernet 00:c0:a8:bd:d5:a1;
	fixed-address 10.0.1.51;
}
host s_lan_82 {
	hardware ethernet 00:16:6f:97:bb:94;
	fixed-address 10.0.1.52;
}
host s_lan_83 {
	hardware ethernet 00:13:02:70:70:10;
	fixed-address 10.0.1.53;
}
host s_lan_84 {
	hardware ethernet 00:14:78:79:c3:50;
	fixed-address 10.0.1.54;
}
host s_lan_85 {
	hardware ethernet 00:15:00:35:50:94;
	fixed-address 10.0.1.55;
}
host s_lan_86 {
	hardware ethernet 00:14:78:74:05:58;
	fixed-address 10.0.1.56;
}
host s_lan_87 {
	hardware ethernet 00:80:c8:2c:c4:03;
	fixed-address 10.0.1.57;
}
host s_lan_88 {
	hardware ethernet 00:13:02:49:b3:af;
	fixed-address 10.0.1.58;
}
host s_lan_89 {
	hardware ethernet 00:14:a5:7c:6b:58;
	fixed-address 10.0.1.59;
}
host s_lan_90 {
	hardware ethernet 00:14:a5:a4:35:0b;
	fixed-address 10.0.1.60;
}
host s_lan_91 {
	hardware ethernet 00:14:6c:6c:cb:1f;
	fixed-address 10.0.1.61;
}
host s_lan_92 {
	hardware ethernet 00:14:6c:e1:1c:26;
	fixed-address 10.0.1.62;
}
host s_lan_93 {
	hardware ethernet 00:10:a7:09:44:c8;
	fixed-address 10.0.1.63;
}
host s_lan_94 {
	hardware ethernet 00:13:02:49:e1:d6;
	fixed-address 10.0.1.64;
}
host s_lan_95 {
	hardware ethernet 00:16:6f:b2:23:4c;
	fixed-address 10.0.1.65;
}
host s_lan_96 {
	hardware ethernet 00:04:75:fd:d6:e5;
	fixed-address 10.0.1.66;
}
host s_lan_97 {
	hardware ethernet 00:c0:a8:ad:81:46;
	fixed-address 10.0.1.67;
}
host s_lan_98 {
	hardware ethernet 00:13:ce:1a:b6:cb;
	fixed-address 10.0.1.68;
}
host s_lan_99 {
	hardware ethernet 00:13:02:ca:7f:d5;
	fixed-address 10.0.1.69;
}
host s_lan_100 {
	hardware ethernet 00:90:4b:bd:e3:66;
	fixed-address 10.0.1.70;
}
host s_lan_101 {
	hardware ethernet 00:30:bd:af:6b:a8;
	fixed-address 10.0.1.71;
}
host s_lan_102 {
	hardware ethernet 00:16:6f:ae:4f:de;
	fixed-address 10.0.1.72;
}
host s_lan_103 {
	hardware ethernet 00:20:a6:50:b9:06;
	fixed-address 10.0.1.73;
}
host s_lan_104 {
	hardware ethernet 00:14:a5:16:f8:8e;
	fixed-address 10.0.1.74;
}
host s_lan_105 {
	hardware ethernet 00:16:36:af:f7:f9;
	fixed-address 10.0.1.75;
}
host s_lan_106 {
	hardware ethernet 00:18:f3:46:58:40;
	fixed-address 10.0.1.76;
}
host s_lan_107 {
	hardware ethernet 00:17:31:a2:96:e1;
	fixed-address 10.0.1.77;
}
host s_lan_108 {
	hardware ethernet 00:12:f0:d2:61:6c;
	fixed-address 10.0.1.78;
}
host s_lan_109 {
	hardware ethernet 00:16:cf:52:f2:0d;
	fixed-address 10.0.1.79;
}
host s_lan_110 {
	hardware ethernet 00:02:72:58:ff:c2;
	fixed-address 10.0.1.80;
}
host s_lan_111 {
	hardware ethernet 00:14:a5:34:00:7e;
	fixed-address 10.0.1.81;
}
host s_lan_112 {
	hardware ethernet 00:05:5d:9f:c8:80;
	fixed-address 10.0.1.82;
}
host s_lan_113 {
	hardware ethernet 00:16:6f:ae:09:42;
	fixed-address 10.0.1.83;
}
host s_lan_114 {
	hardware ethernet 00:14:a5:99:f1:bf;
	fixed-address 10.0.1.84;
}
host s_lan_115 {
	hardware ethernet 00:17:f2:46:57:26;
	fixed-address 10.0.1.85;
}
host s_lan_116 {
	hardware ethernet 00:16:d4:53:3f:15;
	fixed-address 10.0.1.86;
}
host s_lan_117 {
	hardware ethernet 00:18:de:97:8d:99;
	fixed-address 10.0.1.87;
}
host s_lan_118 {
	hardware ethernet 00:14:a5:d1:ae:c9;
	fixed-address 10.0.1.88;
}
host s_lan_119 {
	hardware ethernet 00:16:6f:b3:74:70;
	fixed-address 10.0.1.89;
}
host s_lan_120 {
	hardware ethernet 00:0a:95:f8:3b:51;
	fixed-address 10.0.1.115;
}
host s_lan_121 {
	hardware ethernet 00:14:bf:75:f0:3c;
	fixed-address 10.0.1.170;
}
subnet 10.0.1.0 netmask 255.255.255.0 {
	pool {
		option domain-name-servers 10.0.0.1;
		deny unknown clients;
		range 10.0.1.255 10.0.1.255;
	}
	option routers 10.0.1.1;
	option domain-name-servers 10.0.0.1;
}

              That's the whole thing :P Removed my domain-name at line 1 (or 0 if you want :P ).

              1 Reply Last reply Reply Quote 0
              • J
                Johnny_B
                last edited by

                I've looked in the sourcecode and found out a new flag for ifconfig I didn't know about

                Fra /etc/inc/services.inc

                mwexec("/sbin/ifconfig " . escapeshellarg($ifcfg['if']) . " staticarp " );

                It looks like it is here the trouble with Windows lies. There was no trouble with restricting only on DHCP level (but then you can just assign yourself an IP, so not very secure)…

                Static ARP only makes sure that "10.0.0.100 -> 00:00:00:00:00:11" is true, if not the request is blocked. You could just use an IP that has no MAC adresse related to it. Therefore "/sbin/ifconfig if staticarp" which disables this. But it looks like Windows doesn't like this way to do stuff.

                1 Reply Last reply Reply Quote 0
                • J
                  Johnny_B
                  last edited by

                  Just wanted to update this and say that it still doesn't work in 1.0.1… Anybody know what this might be? Or have any other advice how to get the same functionality?

                  I want to have an easy way to connect to the network. And I admin want to know what IP the client has. The way it is now each IP is linked to the MAC address and with a discription with the owner of the computer. And I want to seperate wires from non wires :)

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post