Hello Eric,

just to reply then the mailing will be aware of the solution.

The issue was because the registration interface received dhcp packet from a source ip address that was suppose to be routed by the management interface.

So the linux kernel dropped the packet.

To fix that you need to tell the kernel to not drop the packet with that in the sysctl.conf.

net.ipv4.conf.all.rp_filter = 2
net.ipv4.conf.default.rp_filter = 2

then sysctl -p

Regards

Fabrice


Le 19-02-26 à 11 h 14, Eric Rolleman via PacketFence-users a écrit :

We have a PacketFence cluster setup at our main office that services 17 other sites as well.

I am trying to setup the registration VLAN at the remote site. What I have done thus far:

1.Create a routed network in PacketFence with the registration type and enabled DHCP on it.

2.Setup DHCP relay on the Layer 3 switch at the remote site and pointed it to the PacketFence Cluster IP in the Registration VLAN at the main office

The PacketFence cluster will respond to DHCP requests of client on the Registration VLAN at the main office, but not remote sites.

If I use the tcpdump command to view packets coming in, I can see that the DHCP requests make it to the PacketFence cluster, however the PacketFence cluster does not send a DHCP reply.

If I give a device a static IP address on the registration VLAN on the remote network, I can ping the PacketFence cluster IP (on the Registration VLAN) and get to the Captive Portal, so firewalls aren’t an issue. PacketFence just isn’t sending any replies to DHCP.

I also tried restarting all the nodes to make sure any services that need restarting after the change have been restarted.

What piece am I missing?



_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

--
Fabrice Durand
[email protected] ::  +1.514.447.4918 (x135) ::  www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
(http://packetfence.org)

_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to