Page MenuHomeVyOS Platform
Create Task
Maniphest T377

DHCP-relay agent package replacement
Open, LowPublicFEATURE REQUEST
Actions

Description

It's not possible to use DHCP-relay agent over OpenVPN(L3/vtun) uplink beause of ISC DHCP-relay agent limitations/bug.
If I use the vyos DHCP-relay it's necessary to configure the LAN and the uplink interface to DHCP server in dhcp-relay config section. But OpenVPN TUN interfaces can't be used as dhcp-relay interfaces because they has no MAC addresses.

Tools like dnsmasq(>=version 2.67) and dhcp-helper from Simon Kelley use only one interface for dhcp-relay function.

In my lab configuration I use a central VyOS router(r1-core) and 3 site VyOS routers(r1-site1,r1-site2,r1-site3) with OpenVPN uplink connections to central r1-core.
There is is a central DHCP server on r1-core that is reachable from all site over OpenVPN(over L3) and has scopes for the site LANs.
All is working with the included ISC dhcp-relay expect the answer from the DHCP server(DHCP offer packets) dosn't reach the dhcp client.
I have monitored the traffic on the OpenVPN TUN(vtun1) interface and the LAN ethernet interface on the sites for debugging with tshark.
The result was there are the right DHCP offers packets on the TUN interface but nothing expect the DHCP discover packets on the LAN interface.
So at the moment there is no solution to get this configuration to work.

VyOS_DHCP-relay.png (1×794 px, 178 KB)

Details

Difficulty level
Hard (possibly days)
Version
-
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Unspecified (please specify)

Related Objects
Search...

StatusSubtypeAssignedTask
 OpenFEATURE REQUESTNoneT377 DHCP-relay agent package replacement
 OpenFEATURE REQUESTNoneT3340 Add dhcp-helper package to replace ISC DHCP Relay

Event Timeline

msc created this task.Sep 1 2017, 6:05 PM
msc updated the task description. (Show Details)Sep 1 2017, 8:12 PM
msc updated the task description. (Show Details)Sep 1 2017, 8:22 PM
msc added a comment.Sep 1 2017, 8:28 PM

same problem:
https://forum.vyos.net/showthread.php?tid=18134

possible solutions with other software tools (in german):
https://www.cubewerk.de/2014/01/20/dhcp-relay-dhcp-helper-ip-helper-address-unter-linux/

msc added a comment.Sep 5 2017, 7:13 PM

As workaround I used Beta/development build and get it working in my lab with dnsmasq(2.72) from

Version: VyOS 999.201708312137
Built by: [email protected]
Built on: Thu 31 Aug 2017 21:37 UTC
Build ID: 4126462b-bb91-4151-9f19-1e1229de2fdc

I deleted the dhcp-relay section from config and add the following line to /config/scripts/vyatta-postconfig-bootup.script for automatic start after boot

dnsmasq --dhcp-relay=<local interface address>,<dhcp-server address>

for two or more local interface I used

dnsmasq --dhcp-relay=<local interface1 address>,<dhcp-server address> --dhcp-relay=<local interface2 address>,<dhcp-server address>

pasik subscribed.Oct 27 2017, 10:01 PM
syncer triaged this task as Low priority.Dec 21 2017, 9:52 PM
dmbaturin moved this task from Need Triage to Wishlist on the VyOS 1.2 Crux board.May 31 2018, 12:16 AM
msbone subscribed.EditedAug 18 2018, 3:47 PM

A newer version of isc-dhcrelay is now available

-iu ifname Specifies an upstream network interface: an interface from which replies from servers and other relay agents will be accepted. Multiple interfaces may be specified by using more than one -iu option. This argument is intended to be used in conjunction with one or more -i or -id arguments.

-id Specifies a downstream network interface: an interface from which requests from clients and other relay agents will be accepted. Multiple interfaces may be specified by using more than one -id option. This argument is intended to be used in conjunction with one or more -i or -iu arguments.

syncer edited projects, added VyOS 1.3 Equuleus; removed VyOS 1.2 Crux.Oct 13 2018, 9:46 AM
xrpixer subscribed.Jan 23 2019, 5:04 PM
Unknown Object (User) claimed this task.May 9 2020, 10:21 AM
dmbaturin edited projects, added VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.Dec 10 2020, 11:59 AM
dmbaturin set Is it a breaking change? to Unspecified (possibly destroys the router).
dmbaturin changed Difficulty level from Unknown (require assessment) to Hard (possibly days).
HON subscribed.Feb 17 2021, 10:03 AM
basalblas subscribed.Feb 18 2021, 3:44 PM

dhcp-helper is working perfectly fine with GRE tunnels, see my feature request https://phabricator.vyos.net/T3340

HON mentioned this in T3340: Add dhcp-helper package to replace ISC DHCP Relay.Feb 22 2021, 11:13 AM
dmbaturin removed Unknown Object (User) as the assignee of this task.Jan 9 2024, 4:15 PM
dmbaturin added a subtask: T3340: Add dhcp-helper package to replace ISC DHCP Relay.
dmbaturin edited projects, added VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin set Issue type to Unspecified (please specify).
dmbaturin added a subscriber: Unknown Object (User).
dmbaturin added a project: Restricted Project.Mon, Sep 16, 4:16 PM