[Kea-users] Kea-DHCP HA

[Kraishak Mahtha]

Hi,

While I am checking for the failover section in the kea guide under the
section

https://kea.readthedocs.io/en/kea-2.2.0/arm/hooks.html?highlight=trust-anchor#https-support
it says

The three parameters must be either all not specified (HTTPS disabled) or
all specified (HTTPS enabled)
--> I tried the case with empty files
Tried empty values for the fields trust-anchor,cert-file,key-file in
kea-dhcpd.conf in both primary and secondary but It didn't work then later
I made empty the fields also in kea-ctrl-agent.conf but still didn't work,
tried setting the param value require-client-certs and cert-required to
false but still didn't work
Again When I replaced it with a certificate file it worked, so I doubt if
the certificates are mandatory for kea-HA(2.2.0) in the latest version.

And also do we need to run the kea-control agent on both the primary and
failover servers?

Thanks in Advance
Kraishak

On Thu, Mar 30, 2023 at 6:51 PM <egor.grijuc at orange.com> wrote:

> Do you mean through config file?
>
>
>
> *From:* Kea-users <kea-users-bounces at lists.isc.org> * On Behalf Of *Kraishak
> Mahtha
> *Sent:* Thursday, 30 March 2023 15:02
> *To:* Kea-users at lists.isc.org
> *Subject:* [Kea-users] Kea-DHCP HA
>
>
>
> Hi all,
>
> I have recently started exploring kea-dhcp4 ha, I have a doubt can we
> configure the kea -HA without using kea-control agent ?
>
>
>
> Thanks in advance
>
> Kraishak
>
> _________________________________________________________________________________________________________________________
>
> Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
> pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
> a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
> Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.
>
> This message and its attachments may contain confidential or privileged information that may be protected by law;
> they should not be distributed, used or copied without authorisation.
> If you have received this email in error, please notify the sender and delete this message and its attachments.
> As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
> Thank you.
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/kea-users/attachments/20230403/928b6178/attachment.htm>