Hi,

I've the same problem for over 2 years now, never figured it out. Did not
invest much time though :-)

I tried it with multicast and unicast, currently its like that:

host 1
/usr/sbin/dhcpd -y 172.16.106.252 -Y 172.16.106.253 vlan703
host 2
/usr/sbin/dhcpd -y 172.16.106.253 -Y 172.16.106.252 vlan703

I see the "sending DHCP_SYNC_LEASE" on both hosts when a IP address is
assigned
dhcpd[22525]: sending DHCP_SYNC_LEASE for hw 52:54:00:44:f7:e2 -> ip
172.16.103.111, start 1332453276, end 1332496476

but I don't see any "receiving DHCP_SYNC_LEASE" log message. Also I see the
packets on the interface with tcpdump and I see a pass out mach in pflog. I
don't see a pass in, but I think that is because FWs are pfsynced and it's the
same state (in / out).

rule 30/(match) [uid 0, pid 2956] pass out on vlan706: 172.16.106.253.8067 >
172.16.106.252.8067: udp 100 (ttl 64, id 53316, len 128, bad cksum 6c!)

In /var/db/dhcpd.leases I see the exactly same entry for the lease on both
hosts. maybe thats why no sync message is in log, because the entry is already
in it?

host1:
lease 172.16.103.111 {
        starts 4 2012/03/22 21:54:36;
        ends 5 2012/03/23 09:54:36;
        hardware ethernet 52:54:00:44:f7:e2;
}
host2:
lease 172.16.103.111 {
        starts 4 2012/03/22 21:54:36;
        ends 5 2012/03/23 09:54:36;
        hardware ethernet 52:54:00:44:f7:e2;
}

so is it working? or is it just a coinicidence that the lease is there on both
hosts?


greets
Marco

On Mar 22, 2012, at 12:03 PM, Jose Fragoso wrote:

> Hi,
>
> Thanks a lot for your hint.
>
> Now, I can see (what I guess should be) the sync packets
> going through the em0 iface:
>
> 07:54:32.877138 00:22:64:89:64:79 01:00:5e:00:01:f0 0800
> 142: 10.1.1.2.8067 > 224.0.1.240.8067: udp 100 [ttl 1]
> (id 20862, len 128)
>
> 07:54:32.877187 00:22:64:89:67:6a 01:00:5e:00:01:f0 0800
> 142: 10.1.1.1.8067 > 224.0.1.240.8067: udp 100 [ttl 1]
> (id 51033, len 128)
>
> However, I am still not seeing the
>
> "DHCP_SYNC_LEASE from...."
>
> messages in the logs, which makes me think sync is still
> not working properly.
>
> Is there a way to make sure the sync is working?
>
> Thanks.
>
> Kind regards,
>
> Jose.

Reply via email to