Dhcpd

From TheBeard Science Project Wiki
Jump to: navigation, search
packages:
	dhcp
	dhclient

daemons:
	dhcpd

configs:
	/etc/dhcp/dhcpd.conf - contains all dhcp configs

ports:
	udp 67 - dhcp request
	udp 68 - dhcp reply
	tcp/udp 546 - dhcp request ipv6
	tcp/udp 547 - dhcp reply ipv6

args:
	arguments can be places globally or within a subnet structure	
	# = comment

	default-lease-time <seconds>;
	max-lease-time <seconds>;
	min-lease-time <seconds>;
	option subnet-mask <mask>;
	option domain-name <mane>;
	option domain-name-servers <name|addr>, <name|addr>;
	option routers <addr>; - default gateway
	option broadcast-address <addr>;
	range <addr> <addr>;
	include "<file>";
	fixed-address <addr>, <addr>; - can only be used in the 'host' structure
	hardware ethernet <mac>; - used to identify a host. can only be used in the 'host' structure.
	option host-name "<name>"; - names the host. can only be used in the 'host' structure.

	allow unknown-clients;
	deny unknown-clients;
	ignore unknown-clients; - same as 'deny' but doesnt log events

	allow bootp; - default
	deny bootp;
	ignore bootp;

	allow declines; - DHCPDECLINE messages from clients cause to server to abandon that address. this opens a ddos vulnerability. use deny or ignore to prevent it.
	deny declines;
	ignore declines;

	allow leasequery; - allows clients to collect information about leases
	denyleasequery; - default

structures:
	
	subnet <net-addr> netmask <mask> {
		range <addr> <addr>;
		<args>;
		pool {
			range <addr> <addr>; - range is withing subnet
			<args>
		}
	}

	group {
		<args>
		host {
			<args>
		}
	}

examples:

	default-lease-time 172800;
	max-lease-time 172800;

	option subnet-mask 255.255.240.0;
	option domain-name-servers 10.1.16.2;

	subnet 10.1.16.0 netmask 255.255.240.0 {
		range 10.1.16.10 10.1.16.15;
		option routers 10.1.16.1;
		option broadcast-address 10.1.31.255;
	}

	subnet 10.1.32.0 netmask 255.255.240.0 {
		range 10.1.32.10 10.1.32.15;
		option routers 10.1.32.1;
		option broadcast-address 10.1.47.255;
	}