Not including option43(VendorSpecificInformation) when lease

[藤原慎太郎]

Hi, I have a question on option43(VendorSpecificInformation).

How do I lease address not informing
option43(VendorSpecificInformation) from some subnet.

I have 3 subnets making shared-network.

I want to lease address informing option43(VendorSpecificInformation)
to some subnet and not to some subnet.

I have written configuration using class and subclass, and allow / deny in pool.
But not working well (denied altogether).

/////////////////////////////////////////////////////////////////////
dhcpd.conf
//////////////////////////////////////////////////////////////////////
...(snip)...
option space Cisco_LWAPP_AP;
option Cisco_LWAPP_AP.server-address code 241 = ip-address;
class "Cisco_LWAPP_AP" {
    match option vendor-class-identifier;
}
subclass "Cisco_LWAPP_AP" "Cisco-AP-c1140" {
  vendor-option-space Cisco_LWAPP_AP;
  option Cisco_LWAPP_AP.server-address 192.168.247.5;
}
subclass "Cisco_LWAPP_AP" "Cisco AP c1200" {
  vendor-option-space Cisco_LWAPP_AP;
  option Cisco_LWAPP_AP.server-address 192.168.247.55;
}
shared-network subnet-a{
include "/etc/dhcpd.conf.subnet192.168.1.0";
include "/etc/dhcpd.conf.subnet192.168.2.0";
include "/etc/dhcpd.conf.subnet192.168.3.0";
}
/////////////////////////////////////////////////////////////////////
/etc/dhcpd.conf.subnet192.168.1.0
/////////////////////////////////////////////////////////////////////
pool {
    range 192.168.1.11 192.168.1.20;
    allow members of "Cisco_LWAPP_AP";
}
/////////////////////////////////////////////////////////////////////
/etc/dhcpd.conf.subnet192.168.2.0
/////////////////////////////////////////////////////////////////////
pool {
    range 192.168.1.11 192.168.2.20;
    deny members of "Cisco_LWAPP_AP";
}
/////////////////////////////////////////////////////////////////////
/etc/dhcpd.conf.subnet192.168.3.0
/////////////////////////////////////////////////////////////////////
pool {
    range 192.168.1.11 192.168.3.20;
    allow members of "Cisco_LWAPP_AP";
}
_______________________________________________
dhcp-users mailing list
[hidden email]
https://lists.isc.org/mailman/listinfo/dhcp-users

[Niall O'Reilly]

On Fri, 24 Jul 2015 03:14:07 +0100,
藤原慎太郎 wrote:

>
> /////////////////////////////////////////////////////////////////////
> /etc/dhcpd.conf.subnet192.168.1.0
> /////////////////////////////////////////////////////////////////////
> pool {
>     range 192.168.1.11 192.168.1.20;
>     allow members of "Cisco_LWAPP_AP";
> }
> /////////////////////////////////////////////////////////////////////
> /etc/dhcpd.conf.subnet192.168.2.0
> /////////////////////////////////////////////////////////////////////
> pool {
>     range 192.168.1.11 192.168.2.20;
>     deny members of "Cisco_LWAPP_AP";
> }
> /////////////////////////////////////////////////////////////////////
> /etc/dhcpd.conf.subnet192.168.3.0
> /////////////////////////////////////////////////////////////////////
> pool {
>     range 192.168.1.11 192.168.3.20;
>     allow members of "Cisco_LWAPP_AP";
> }

  Do you intend these ranges to overlap?

  Best regards,
  Niall O'Reilly
_______________________________________________
dhcp-users mailing list
[hidden email]
https://lists.isc.org/mailman/listinfo/dhcp-users

[藤原慎太郎]

Thanks, Niall.

Yes, but I have noticed that class is global, and
global thing don't come along with shared-network.
So, I have changed configuration not using class or
subclass.

By this configuration I think I can only tell 192.168.1.0
and 192.168.3.0 subnet clients the needed info.

/////////////////////////////////////////////////////////////////////
dhcpd.conf
//////////////////////////////////////////////////////////////////////
...(snip)...

option space Cisco_LWAPP_AP;
option Cisco_LWAPP_AP.server-address code 241 = ip-address;
vendor-option-space Cisco_LWAPP_AP;

...(snip)...

shared-network subnet-a{
include "/etc/dhcpd.conf.subnet192.168.1.0";
include "/etc/dhcpd.conf.subnet192.168.2.0";
include "/etc/dhcpd.conf.subnet192.168.3.0";
}
/////////////////////////////////////////////////////////////////////
/etc/dhcpd.conf.subnet192.168.1.0
/////////////////////////////////////////////////////////////////////
...(snip)...
pool {
...(snip)...
  if option vendor-class-identifier = "Cisco-AP-c1140" {
    option Cisco_LWAPP_AP.server-address 192.168.247.5;
  }
  if option vendor-class-identifier = "Cisco AP c1200" {
    option Cisco_LWAPP_AP.server-address 192.168.247.55;
  }
}
...(snip)...
/////////////////////////////////////////////////////////////////////
/etc/dhcpd.conf.subnet192.168.2.0
/////////////////////////////////////////////////////////////////////
pool {
...(snip)...
}
/////////////////////////////////////////////////////////////////////
/etc/dhcpd.conf.subnet192.168.3.0
/////////////////////////////////////////////////////////////////////
...(snip)...
pool {
...(snip)...
  if option vendor-class-identifier = "Cisco-AP-c1140" {
    option Cisco_LWAPP_AP.server-address 192.168.247.5;
  }
  if option vendor-class-identifier = "Cisco AP c1200" {
    option Cisco_LWAPP_AP.server-address 192.168.247.55;
  }
}
...(snip)...

2015-07-28 1:36 GMT+09:00 Niall O'Reilly <[hidden email]>:

> On Fri, 24 Jul 2015 03:14:07 +0100,
> 藤原慎太郎 wrote:
>>
>> /////////////////////////////////////////////////////////////////////
>> /etc/dhcpd.conf.subnet192.168.1.0
>> /////////////////////////////////////////////////////////////////////
>> pool {
>>     range 192.168.1.11 192.168.1.20;
>>     allow members of "Cisco_LWAPP_AP";
>> }
>> /////////////////////////////////////////////////////////////////////
>> /etc/dhcpd.conf.subnet192.168.2.0
>> /////////////////////////////////////////////////////////////////////
>> pool {
>>     range 192.168.1.11 192.168.2.20;
>>     deny members of "Cisco_LWAPP_AP";
>> }
>> /////////////////////////////////////////////////////////////////////
>> /etc/dhcpd.conf.subnet192.168.3.0
>> /////////////////////////////////////////////////////////////////////
>> pool {
>>     range 192.168.1.11 192.168.3.20;
>>     allow members of "Cisco_LWAPP_AP";
>> }
>
>   Do you intend these ranges to overlap?
>
>   Best regards,
>   Niall O'Reilly
> _______________________________________________
> dhcp-users mailing list
> [hidden email]
> https://lists.isc.org/mailman/listinfo/dhcp-users

_______________________________________________
dhcp-users mailing list
[hidden email]
https://lists.isc.org/mailman/listinfo/dhcp-users