Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    DHCP on bridge

    DHCP and DNS
    4
    6
    1.3k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • E
      edwardwong
      last edited by

      Hi all,

      I've bridged OPT1/2 interfaces to my LAN interface, I found that only clients on LAN interface are able to get DHCP offer, clients on other ports of the bridge won't get any offer, but if my client has fix IP then network is accessible, which means only DHCP is not passing to the bridge, any reason? How should I handle this? Thanks.

      1 Reply Last reply Reply Quote 0
      • E
        edwardwong
        last edited by

        Find the answer myself, the bridge doesn't pass DHCP broadcast by default, I explicitly allow traffic from UDP source port 67/68 to the bridge then everything working well.

        1 Reply Last reply Reply Quote 0
        • P
          phil.davis
          last edited by

          The code that writes the firewall rules is supposed to put rules to pass port 67/68 when DHCP is enabled. It sounds like there is a bug there when using a bridge, probably the code is writing those rules but not to the correct interface that is being used for firewalling.

          As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
          If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

          1 Reply Last reply Reply Quote 0
          • E
            edwardwong
            last edited by

            From what I know, after 1.2RC DHCP traffic won't pass through anymore, they said previously allowing this was a bug, it shouldn't pass traffic that we didn't explicitly allow (but the point is, other than that, ping, normal TCP/UDP traffic are still passing as usual, weird…)

            1 Reply Last reply Reply Quote 0
            • N
              ndutyme
              last edited by

              Hey Edward,

              I am curious because I am trying to do something similar, but I'm afraid it's not supported on pfSense.
              Let me know if what you were doing is similar to what I describe below.

              Here is what I'm trying to do:
              I have multiple subnets between routed gateways that I want pfSense to answer DHCP requests for.
              This is done now by a Linux server, with one NIC, no vLANs,  running isc dhcpd6. I'd like to get rid of this Linux box.
              All the network routers/gateways are configured with a DHCP-helper. This causes the gateways to send all DHCP requests to the single DHCP server. Then the DHCP server replies with an IP for the subnet pool that matches the gateway that made the request.

              Thanks for any info (from anybody).

              1 Reply Last reply Reply Quote 0
              • T
                Trel
                last edited by

                Before I got a dedicated AP system, I bridged my old WRT on one interface to the second with the wired switch.

                Long story short

                I needed to change

                System -> System Tunables

                net.link.bridge.pfil_member to 0
                net.link.bridge.pfil_bridge to 1

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post