Dhcpd
From TheBeard Science Project Wiki
packages:
dhcp
dhclient
daemons:
dhcpd
configs:
/etc/dhcp/dhcpd.conf - contains all dhcp configs
ports:
udp 67 - dhcp request
udp 68 - dhcp reply
tcp/udp 546 - dhcp request ipv6
tcp/udp 547 - dhcp reply ipv6
args:
arguments can be places globally or within a subnet structure
# = comment
default-lease-time <seconds>;
max-lease-time <seconds>;
min-lease-time <seconds>;
option subnet-mask <mask>;
option domain-name <mane>;
option domain-name-servers <name|addr>, <name|addr>;
option routers <addr>; - default gateway
option broadcast-address <addr>;
range <addr> <addr>;
include "<file>";
fixed-address <addr>, <addr>; - can only be used in the 'host' structure
hardware ethernet <mac>; - used to identify a host. can only be used in the 'host' structure.
option host-name "<name>"; - names the host. can only be used in the 'host' structure.
allow unknown-clients;
deny unknown-clients;
ignore unknown-clients; - same as 'deny' but doesnt log events
allow bootp; - default
deny bootp;
ignore bootp;
allow declines; - DHCPDECLINE messages from clients cause to server to abandon that address. this opens a ddos vulnerability. use deny or ignore to prevent it.
deny declines;
ignore declines;
allow leasequery; - allows clients to collect information about leases
denyleasequery; - default
structures:
subnet <net-addr> netmask <mask> {
range <addr> <addr>;
<args>;
pool {
range <addr> <addr>; - range is withing subnet
<args>
}
}
group {
<args>
host {
<args>
}
}
examples:
default-lease-time 172800;
max-lease-time 172800;
option subnet-mask 255.255.240.0;
option domain-name-servers 10.1.16.2;
subnet 10.1.16.0 netmask 255.255.240.0 {
range 10.1.16.10 10.1.16.15;
option routers 10.1.16.1;
option broadcast-address 10.1.31.255;
}
subnet 10.1.32.0 netmask 255.255.240.0 {
range 10.1.32.10 10.1.32.15;
option routers 10.1.32.1;
option broadcast-address 10.1.47.255;
}