Beard: Created page with "

 packages: 	dhcp 	dhclient  daemons: 	dhcpd  configs: 	/etc/dhcp/dhcpd.conf - contains all dhcp configs  ports: 	udp 67 - dhcp request 	udp 68 - dhcp reply 	tcp/udp 546 -..."

2016-02-29T21:13:47Z

Created page with "<pre> packages: dhcp dhclient daemons: dhcpd configs: /etc/dhcp/dhcpd.conf - contains all dhcp configs ports: udp 67 - dhcp request udp 68 - dhcp reply tcp/udp 546 -..."

New page

<pre>
packages:
dhcp
dhclient

daemons:
dhcpd

configs:
/etc/dhcp/dhcpd.conf - contains all dhcp configs

ports:
udp 67 - dhcp request
udp 68 - dhcp reply
tcp/udp 546 - dhcp request ipv6
tcp/udp 547 - dhcp reply ipv6

args:
arguments can be places globally or within a subnet structure
# = comment

default-lease-time <seconds>;
max-lease-time <seconds>;
min-lease-time <seconds>;
option subnet-mask <mask>;
option domain-name <mane>;
option domain-name-servers <name|addr>, <name|addr>;
option routers <addr>; - default gateway
option broadcast-address <addr>;
range <addr> <addr>;
include "<file>";
fixed-address <addr>, <addr>; - can only be used in the 'host' structure
hardware ethernet <mac>; - used to identify a host. can only be used in the 'host' structure.
option host-name "<name>"; - names the host. can only be used in the 'host' structure.

allow unknown-clients;
deny unknown-clients;
ignore unknown-clients; - same as 'deny' but doesnt log events

allow bootp; - default
deny bootp;
ignore bootp;

allow declines; - DHCPDECLINE messages from clients cause to server to abandon that address. this opens a ddos vulnerability. use deny or ignore to prevent it.
deny declines;
ignore declines;

allow leasequery; - allows clients to collect information about leases
denyleasequery; - default

structures:

subnet <net-addr> netmask <mask> {
range <addr> <addr>;
<args>;
pool {
range <addr> <addr>; - range is withing subnet
<args>
}
}

group {
<args>
host {
<args>
}
}

examples:

default-lease-time 172800;
max-lease-time 172800;

option subnet-mask 255.255.240.0;
option domain-name-servers 10.1.16.2;

subnet 10.1.16.0 netmask 255.255.240.0 {
range 10.1.16.10 10.1.16.15;
option routers 10.1.16.1;
option broadcast-address 10.1.31.255;
}

subnet 10.1.32.0 netmask 255.255.240.0 {
range 10.1.32.10 10.1.32.15;
option routers 10.1.32.1;
option broadcast-address 10.1.47.255;
}

</pre>

Dhcpd - Revision history

Beard: Created page with "
packages: dhcp dhclient daemons: dhcpd configs: /etc/dhcp/dhcpd.conf - contains all dhcp configs ports: udp 67 - dhcp request udp 68 - dhcp reply tcp/udp 546 -..."