DHCP Relay: Duplicate packets for DHCPRELEASE and DHCPREQUEST

Sujata Verma sujataverma3 at yahoo.com
Wed Apr 18 10:46:28 UTC 2012


Thanks for reply.

My setup is like this :                                         
                                                                      eth1
  Windows 2003 server ( 192.168.9.2/23)-------------------(192.168.8.177/23) Linux PC(Relay) (80.1.1.1/24----------eth0----Windows XP Client ( DHCP client getting IP 80.1.1.2/24)

In windows server the default gw is 192.168.8.177. The DHCP pool configured gateway is 80.1.1.1 ( relay agent ip) 

I am attaching the wireshark capture for both client and server. In this we can see that the DHCPDISCOVER is only being sent once to the server which relay is forwarding while adding giaddr field as 80.1.1.1 . 

When DHCPRELEASE packet is being sent, it is sent directly to the server and with other two packets as duplicates with giaddr as of two interfaces. 

In linux pc i have only enabled ipv4_forward and disabled iptables completely. Is there any other configuration which can result in my observation like this ?

Please let me know your observations, after seeing the captures. I have tried many times with similar observation.

Regards,
Sujata
                                 
--- On Wed, 4/18/12, Simon Hobson <dhcp1 at thehobsons.co.uk> wrote:

From: Simon Hobson <dhcp1 at thehobsons.co.uk>
Subject: Re: DHCP Relay: Duplicate packets for DHCPRELEASE and DHCPREQUEST
To: "Users of ISC DHCP" <dhcp-users at lists.isc.org>
Date: Wednesday, April 18, 2012, 2:38 PM

Sujata Verma wrote:

> I am using dhcp-4.2.2rc1. I have started the dhcp relay with options
> 
> dhcrelay -d -i eth0 -i eth1 serverip
> 
> everything is working fine except that when client release the ip and send DHCPRELEASE packet on server side i get 3 packets for each DHCPRELEASE.
> 
> One is directly sent to server ( which is valid packet) the other two are duplicate of this packet which is generated by relay agent with giaddr as address of eth0 and eth1 interface.
> 
> Is this normal behavior? The same is observed with unicast DHCPREQUEST .

Are you sure about the unicast packets ? On a switched network, the packet should only ever bee seen by the server - it shouldn't reach the relay agent.

For any boradcast packets, I'd expect to see two copies - one picked up directly by the server, and one picked up by the relay agent. This is inherent in the way the relay agent needs (due to the way it's built) to listen on both interfaces. I wouldn't expect to see a packet with the relay's eth1 address in it - they aren't connected to the same network are they ?

-- Simon Hobson

Visit http://www.magpiesnestpublishing.co.uk/ for books by acclaimed
author Gladys Hobson. Novels - poetry - short stories - ideal as
Christmas stocking fillers. Some available as e-books.
_______________________________________________
dhcp-users mailing list
dhcp-users at lists.isc.org
https://lists.isc.org/mailman/listinfo/dhcp-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/dhcp-users/attachments/20120418/a44bcf22/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Client_DHCP_Relay.pcap
Type: application/octet-stream
Size: 3638 bytes
Desc: not available
URL: <https://lists.isc.org/pipermail/dhcp-users/attachments/20120418/a44bcf22/attachment-0002.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Server_Dhcp_Relay.pcap
Type: application/octet-stream
Size: 5070 bytes
Desc: not available
URL: <https://lists.isc.org/pipermail/dhcp-users/attachments/20120418/a44bcf22/attachment-0003.obj>


More information about the dhcp-users mailing list