dhcpd (failover peer setup) going and staying in failover state

[Nathan Hüsken]

Hi,

I have stup dhcpd (isc-dhcpd-4.2.5) in a 2 peers failover setup. I start the service on both peers and get (example from the primary):

-------------------------------------------- Output of service dhcpd status -l
Redirecting to /bin/systemctl status  -l dhcpd.service
● dhcpd.service - DHCPv4 Server Daemon
   Loaded: loaded (/etc/systemd/system/dhcpd.service; enabled; vendor preset: disabled)
   Active: active (running) since So 2018-07-29 10:18:34 UTC; 1min 36s ago
     Docs: man:dhcpd(8)
           man:dhcpd.conf(5)
Main PID: 31729 (dhcpd)
   Status: "Dispatching packets..."
   CGroup: /system.slice/dhcpd.service
           └─31729 /usr/sbin/dhcpd -f -cf /etc/dhcp/dhcpd.conf -user dhcpd -group dhcpd --no-pid eth1

Jul 29 10:18:34 VM-cddd5fc5-4761-492b-a814-2f450c3540cf dhcpd[31729]: For info, please visit https://www.isc.org/software/dhcp/
Jul 29 10:18:34 VM-cddd5fc5-4761-492b-a814-2f450c3540cf dhcpd[31729]: Not searching LDAP since ldap-server, ldap-port and ldap-base-dn were not specified in the config file
Jul 29 10:18:34 VM-cddd5fc5-4761-492b-a814-2f450c3540cf dhcpd[31729]: Wrote 0 leases to leases file.
Jul 29 10:18:34 VM-cddd5fc5-4761-492b-a814-2f450c3540cf dhcpd[31729]: Listening on LPF/eth1/0a:1b:c4:00:61:7c/192.168.123.0/24
Jul 29 10:18:34 VM-cddd5fc5-4761-492b-a814-2f450c3540cf dhcpd[31729]: Sending on   LPF/eth1/0a:1b:c4:00:61:7c/192.168.123.0/24
Jul 29 10:18:34 VM-cddd5fc5-4761-492b-a814-2f450c3540cf dhcpd[31729]: Sending on   Socket/fallback/fallback-net
Jul 29 10:18:34 VM-cddd5fc5-4761-492b-a814-2f450c3540cf dhcpd[31729]: failover peer failover-partner-secondary: I move from recover to startup
Jul 29 10:18:34 VM-cddd5fc5-4761-492b-a814-2f450c3540cf systemd[1]: Started DHCPv4 Server Daemon.
Jul 29 10:18:49 VM-cddd5fc5-4761-492b-a814-2f450c3540cf dhcpd[31729]: failover peer failover-partner-secondary: I move from startup to recover
Jul 29 10:20:04 VM-cddd5fc5-4761-492b-a814-2f450c3540cf dhcpd[31729]: failover peer failover-partner-secondary: unexpected error
--------------------------------------------

I get the same log on the secondary, only that it is reporting the primary is going to startup recovery.

Here are my configs
-------------------------------------------- /etc/dhcpd/dhcpd.conf on primary

option domain-name "wntr.cloud";
option domain-name-servers 192.168.123.1 ,192.168.123.2;

default-lease-time 600;
max-lease-time 7200;

failover peer "failover-partner-secondary" {
    primary;
    address 192.168.123.1;
    port 519;
    peer address 192.168.123.2;
    peer port 520;
    mclt 3600;
    split 128;
    load balance max seconds 3;
}

subnet 192.168.123.0 netmask 255.255.255.0 {
  option broadcast-address        192.168.123.255;
  option subnet-mask              255.255.255.0;
  pool {
    failover peer "failover-partner-secondary";
    range   192.168.123.100   192.168.123.254 ;
  }
}
--------------------------------------------

-------------------------------------------- /etc/dhcpd/dhcpd.conf on secondary

option domain-name "wntr.cloud";
option domain-name-servers 192.168.123.1 ,192.168.123.2;

default-lease-time 600;
max-lease-time 7200;

failover peer "failover-partner-primary" {
    secondary;
    address 192.168.123.2;
    port 520;
    peer address 192.168.123.1;
    peer port 519;
    load balance max seconds 3;
}

subnet 192.168.123.0 netmask 255.255.255.0 {
  option broadcast-address        192.168.123.255;
  option subnet-mask              255.255.255.0;
  pool {
    failover peer "failover-partner-primary";
    range   192.168.123.100   192.168.123.254 ;
  }
}
--------------------------------------------

I can communicate over ports 519/520 (udp) which I tried using netcat.

Any Ideas on how to debug this?

Thanks!
Nathan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/dhcp-users/attachments/20180729/9038bced/attachment.html>