User defined options question

[Joe Hammerman]

Good morning Randall,

The DNS zones we are employing are not a security feature - they are simply for ease of use in referring to particular machines.

It's possible that I'm misunderstanding your question though?

-----Original Message-----
From: dhcp-users-bounces+jhammerman=videoegg.com at lists.isc.org [mailto:dhcp-users-bounces+jhammerman=videoegg.com at lists.isc.org] On Behalf Of Randall C Grimshaw
Sent: Tuesday, May 04, 2010 6:47 PM
To: Users of ISC DHCP
Subject: RE: User defined options question


I do not get the client part of this. do you really want to trust the client to assign its own security.
most would set up classes based on the MAC to assign group membership... not that it is much better.

Randall Grimshaw rgrimsha at syr.edu
________________________________________
From: dhcp-users-bounces+rgrimsha=syr.edu at lists.isc.org [dhcp-users-bounces+rgrimsha=syr.edu at lists.isc.org] On Behalf Of Joe Hammerman [jhammerman at videoegg.com]
Sent: Tuesday, May 04, 2010 5:53 PM
To: dhcp-users at lists.isc.org
Subject: User defined options question

Hello DHCP users list.

I am trying to setup DHCP classes so I can assign machines to different pools within the same subnet, thereby assigning them to different ddns zones.

It seems the best way to do this is with a user defined option passed along with the request from the client.

My dhclient version is 3.0.5.

I have edited my dhclient.conf on my test machine. It looks like this:

cat /etc/dhclient-eth0.conf
option zone-name code 194 = text;
send zone-name "SACDB";
send host-name "ddns-test6";  # temporary RHL ifup addition

I added the following line to my /etc/dhcpd.conf file:

option zone-name code 194 = text;

But tcpdump yields:

21:03:48.943072 00:24:a8:7c:0a:00 > 00:1e:c9:b1:f7:cf, ethertype IPv4 (0x0800), length 342: (tos 0x10, ttl  15, id 56396, offset 0, flags [none], proto: UDP (17), length: 328) 172.17.0.2.bootpc > 10.1.64.11.bootps: BOOTP/DHCP, Request from 36:cd:a9:46:42:fa, length: 300, hops:1, xid:0xf4a8e1e, flags: [none]
          Gateway IP: 172.17.0.2
          Client Ethernet Address: 36:cd:a9:46:42:fa
          Vendor-rfc1048:
            DHCP:REQUEST
            RQ:172.17.8.252
            HN:"ddns-test6"
            PR:SM+BR+TZ+DG+DN+NS+HN+YD+YS+NTP
            T194:83.65.67.68.66
21:03:48.960571 00:1e:c9:b1:f7:cf > 00:00:5e:00:01:a4, ethertype IPv4 (0x0800), length 353: (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto: UDP (17), length: 339) 10.1.64.11.bootps > 172.17.0.1.bootps: BOOTP/DHCP, Reply, length: 311, hops:1, xid:0xf4a8e1e, flags: [none]
          Your IP: 172.17.8.252
          Server IP: 10.1.64.11
          Gateway IP: 172.17.0.1
          Client Ethernet Address: 36:cd:a9:46:42:fa
          file "pxelinux.0"
          Vendor-rfc1048:
            DHCP:ACK
            SID:10.1.64.11
            LT:21600
            SM:255.255.224.0
            DG:172.17.0.1
            DN:"videoegg.com sacda.videoegg.com"
            NS:10.1.64.11,10.1.64.12
21:03:48.962632 00:1e:c9:b1:f7:cf > 00:00:5e:00:01:a4, ethertype IPv4 (0x0800), length 353: (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto: UDP (17), length: 339) 10.1.64.11.bootps > 172.17.0.2.bootps: BOOTP/DHCP, Reply, length: 311, hops:1, xid:0xf4a8e1e, flags: [none]
          Your IP: 172.17.8.252
          Server IP: 10.1.64.11
          Gateway IP: 172.17.0.2
          Client Ethernet Address: 36:cd:a9:46:42:fa
          file "pxelinux.0"
          Vendor-rfc1048:
            DHCP:ACK
            SID:10.1.64.11
            LT:21600
            SM:255.255.224.0
            DG:172.17.0.1
            DN:"videoegg.com sacda.videoegg.com"
            NS:10.1.64.11,10.1.64.12

Can anyone give me any guidance?

Thanks!
_______________________________________________
dhcp-users mailing list
dhcp-users at lists.isc.org
https://lists.isc.org/mailman/listinfo/dhcp-users