<div dir="ltr"><div>Dear Geert Stappers<br>I really apprecate your help<br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sat, Jun 26, 2021 at 4:12 AM Geert Stappers <<a href="mailto:stappers@stappers.nl">stappers@stappers.nl</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On Fri, Jun 25, 2021 at 11:30:18AM +0700, Bino Oetomo wrote:<br><br>
> My question is:<br>
> I'm sure that freeradius sent the response,<br>
<br>
Carefull ...<br>
</blockquote><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<br>
> but how to know if dnsmasq is receiving that response?<br>
<br>
... use networksniffer at **server** to verify that<br>
the network packets actual do leave 'freeradius'<br>
at the correct network interface.<br>
<br>
Next step will be netsniffing at the DHCP relay computer.<br>
<br></blockquote><div>I'm not good in network sniffing.<br></div><div>I take another root...<br></div><div>Try with isc-dhcp-relay : dhcrelay -d -i enp0s9 enp0s8 -id enp0s9 -iu enp0s8 10.10.254.1<br></div><div>And at the client I got :<br>Listening on LPF/enp0s8/08:00:27:84:51:1b<br>Sending on LPF/enp0s8/08:00:27:84:51:1b<br>Sending on Socket/fallback<br>DHCPDISCOVER on enp0s8 to 255.255.255.255 port 67 interval 8<br>DHCPOFFER of 10.10.253.3 from 10.10.253.1<br>DHCPREQUEST for 10.10.253.3 on enp0s8 to 255.255.255.255 port 67<br>DHCPACK of 10.10.253.3 from 10.10.253.1<br>bound to 10.10.253.3 -- renewal in 3295 seconds.<br><br></div><div>So I'm pretty sure the FreeRadius sent the response and reach the dhcp-relay node.<br><br></div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<a href="https://en.wikipedia.org/wiki/Network_Packet_Sniffer" rel="noreferrer" target="_blank">https://en.wikipedia.org/wiki/Network_Packet_Sniffer</a><br>
<br>
<br>
> my dnsmasq configuration<br>
> <br>
> port=0<br>
> interface=enp0s9<br>
> log-dhcp<br>
> dhcp-relay=10.10.253.1,10.10.254.1<br>
<br>
Manual page dnsmasq snippet:<br>
--dhcp-relay=<local address>,<server address>[,<interface]<br>
<br>
So the 'dhcp-relay=10.10.253.1,10.10.254.1' looks good ...<br>
<br>
<br></blockquote><div>I edited it to --> dhcp-relay=10.10.253.1,10.10.254.1,enp0s8<br></div><div>enp0s8 is facing freeradius.<br></div><div>This is tcpdump at the relay :<br><br>11:42:41.275012 IP 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 08:00:27:84:51:1b, length 300<br>11:42:41.275324 IP 10.10.253.1.67 > 10.10.254.1.67: BOOTP/DHCP, Request from 08:00:27:84:51:1b, length 300<br>11:42:41.433288 IP 10.10.254.1.67 > 10.10.253.1.67: BOOTP/DHCP, Reply, length 301<br>11:42:45.558901 IP 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 08:00:27:84:51:1b, length 300<br>11:42:45.559148 IP 10.10.253.1.67 > 10.10.254.1.67: BOOTP/DHCP, Request from 08:00:27:84:51:1b, length 300<br>11:42:45.721512 IP 10.10.254.1.67 > 10.10.253.1.67: BOOTP/DHCP, Reply, length 301<br>11:42:56.982058 IP 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 08:00:27:84:51:1b, length 300<br>11:42:56.982472 IP 10.10.253.1.67 > 10.10.254.1.67: BOOTP/DHCP, Request from 08:00:27:84:51:1b, length 300<br>11:42:57.113442 IP 10.10.254.1.67 > 10.10.253.1.67: BOOTP/DHCP, Reply, length 301<br><br></div><div>Againt, I'm pretty sure that freeradius sent the response and it reach the relay.<br><br></div><div>But, still got the same conndition and client side<br><br>root@bakalandebian:~# dhclient -d enp0s8 <br>Internet Systems Consortium DHCP Client 4.4.1<br>Copyright 2004-2018 Internet Systems Consortium.<br>All rights reserved.<br>For info, please visit <a href="https://www.isc.org/software/dhcp/">https://www.isc.org/software/dhcp/</a><br><br>Listening on LPF/enp0s8/08:00:27:84:51:1b<br>Sending on LPF/enp0s8/08:00:27:84:51:1b<br>Sending on Socket/fallback<br>DHCPDISCOVER on enp0s8 to 255.255.255.255 port 67 interval 3<br>DHCPDISCOVER on enp0s8 to 255.255.255.255 port 67 interval 3<br>DHCPDISCOVER on enp0s8 to 255.255.255.255 port 67 interval 4<br>DHCPDISCOVER on enp0s8 to 255.255.255.255 port 67 interval 11<br>DHCPDISCOVER on enp0s8 to 255.255.255.255 port 67 interval 13<br>DHCPDISCOVER on enp0s8 to 255.255.255.255 port 67 interval 7<br>DHCPDISCOVER on enp0s8 to 255.255.255.255 port 67 interval 14<br>DHCPDISCOVER on enp0s8 to 255.255.255.255 port 67 interval 5<br>No DHCPOFFERS received.<br>No working leases in persistent database - sleeping.<br><br></div><div>Yes isc-dhcp-relay works, but I need to stick with dnsmasq since I need to take care about IPXE.<br></div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">> So kindly please help me to fix this problem<br>
<br>
That was recieved as<br>
<br>
Kindly help me with diagnosing a problem.<br>
<br>
<br>
Already started :-)<br>
<br><br></blockquote><div>I Apologize for my bad english<br><br></div><div>Sincerely<br></div><div>-bino-</div></div></div>