Send dhcp-users mailing list submissions to
        dhcp-users@lists.isc.org

To subscribe or unsubscribe via the World Wide Web, visit
        https://lists.isc.org/mailman/listinfo/dhcp-users
or, via email, send a message with subject or body 'help' to
        dhcp-users-requ...@lists.isc.org

You can reach the person managing the list at
        dhcp-users-ow...@lists.isc.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of dhcp-users digest..."


Today's Topics:

   1. Curious behaviour with expired/abandoned leases not being
      given out (Christopher Causer)


----------------------------------------------------------------------

Message: 1
Date: Tue, 10 Mar 2020 13:48:29 +0000
From: Christopher Causer <christopher.cau...@it.ox.ac.uk>
To: "dhcp-users@lists.isc.org" <dhcp-users@lists.isc.org>
Subject: Curious behaviour with expired/abandoned leases not being
        given out
Message-ID:
        
<cwlp265mb00993681e85fe3ccaa723f7d88...@cwlp265mb0099.gbrp265.prod.outlook.com>
        
Content-Type: text/plain; charset="us-ascii"

Hi DHCP Users list,

May I please have some help understanding what is going on here? I have a pool 
that by some accounts is not full and in others it is and I don't understand 
why.

The logs indicate that it is pushing close to the limits of free addresses when 
balancing
2020-03-10T10:53:19+00:00 $PRIMARY      dhcpd[2147]: balanced pool 55dccc4d51e0 
10.20.200.0/22  total 1008  free 2  backup 2  lts 0  max-misbal 1
2020-03-10T10:53:20+00:00 $SECONDARY dhcpd[3683]: balanced pool 555eee5eb1e0 
10.20.200.0/22  total 1008  free 2  backup 2  lts 0  max-misbal 1

And this is confirmed when some people try to get leases
2020-03-10T10:54:22+00:00 $PRIMARY      dhcpd[3683]: DHCPDISCOVER from $MAC via 
10.20.203.254: peer holds all free leases
2020-03-10T10:54:22+00:00 $SECONDARY dhcpd[2147]: DHCPDISCOVER from $MAC via 
10.20.203.254: peer holds all free leases

However we run dhcpd-pools. The subnet is 43% utilized, but 100% "touch 
utilized":
$ dhcpd-pools
Ranges:
shared net name     first ip           last ip            max   cur    percent  
touch   t+c  t+c perc     bu  bu perc
[snip]
All networks        10.20.200.1      - 10.20.203.240     1008   434     43.056  
  573  1007    99.901      1    0.099

What is happening here? I can see the touched percentage being high, but as I 
understand it that should not be denying any leases being given out. According 
to the dhcpd-pools man page, touched IPs are "
IP's which appear in the lease file, but who's leases have expired. A touched 
IP is either expired or abandoned." We have many subnets and there are only two 
with a touch percentage of ~100% and these are both subnets experiencing issues.

I've set the abandon-lease-time to 1800. Running ping against the subnet, 
sources from the DHCP server, I do not get anywhere close to 50% responses.

Any help gratefully received. Redacted config below. The leases file is too 
large and contains sensitive data that I don't think my employer would be 
willing to hand out unfortunately. I am happy to redact and share relevant 
snippets if required though.

# /etc/dhcp/dhcpd.confcd
-------------------------------------------------->8-------------
ddns-updates off;
ddns-update-style none;
authoritative;
log-facility local7;
local-address $IP;
server-identifier $IP;

key EXKEY {
    [snip]
};

omapi-port 7911;
omapi-key EXKEY;

include "/etc/dhcp/options.conf";

include "/etc/dhcp/failover.conf";

include "/etc/dhcp/nets.conf";
-------------------------------------------------->8-------------



## /etc/dhcp/options.conf
-------------------------------------------------->8-------------
option option-150 code 150 = array of ip-address;
-------------------------------------------------->8-------------



## /etc/dhcp/failover.conf
-------------------------------------------------->8-------------
failover peer " dhcp" {
    primary;
    address $THIS_ADDRESS;
    port 847;
    peer address $PEER_ADDRESS;
    peer port 848;
    max-response-delay 5;
    max-unacked-updates 10;
    load balance max seconds 3;
    # ONLY ON PRIMARY
    mclt 1800;
split 128;
# /ONLY ON PRIMARY

}
-------------------------------------------------->8-------------



## /etc/dhcp/nets.conf
# Very long, so snipped considerably
-------------------------------------------------->8-------------
abandon-lease-time 1800;
default-lease-time 900;
max-lease-time 900;
ping-check false;
one-lease-per-client true;
boot-unknown-clients true;
option domain-name-servers [snip];
option domain-name "[snip]";
option time-servers uk.pool.ntp.org;

subnet 10.20.200.0 netmask 255.255.252.0 {
    option routers 10.20.203.254;
    option subnet-mask 255.255.252.0;

    pool {
            deny dynamic bootp clients;
            failover peer "dhcp";
            range 10.20.200.1 10.20.203.240;
    }
}
-------------------------------------------------->8-------------


-------------- next part --------------
An HTML attachment was scrubbed...
URL: 
<https://lists.isc.org/pipermail/dhcp-users/attachments/20200310/c249332b/attachment.htm>

------------------------------

Subject: Digest Footer

_______________________________________________
dhcp-users mailing list
dhcp-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/dhcp-users


------------------------------

End of dhcp-users Digest, Vol 137, Issue 1
******************************************

Reply via email to