search

HenriWahl / dhcpy6d

MAC address aware DHCPv6 server written in Python
https://dhcpy6d.de
GNU General Public License v2.0
94 stars 27 forks source link

Windows can't get IP after proxmox enabled the firewall #22

Closed xiamaohan closed 4 years ago

xiamaohan commented 5 years ago

Dycpy6d is a great project.

I enabled proxmox behind the firewall.Windows can't get IP, but Linux works.

I use a fixed MAC

https://forum.proxmox.com/threads/dhcpy6d-cannot-be-used-after-opening-the-firewall.53047/

thank you

HenriWahl commented 5 years ago

Hi, can you explain your setup? Which firewall is activated? Where are dhcpy6d and the clients located? Is the firewall in between? Can you do see something with tcpdump?

xiamaohan commented 5 years ago

hello,

I've managed multiple virtual machines in proxmox

Dhcpy6d runs on one of the virtual machines(Only run dhcpy6d and ravdv)

firewall is proxmox's firewall https://pve.proxmox.com/wiki/Firewall I didn't set any rejection rules

Open the log behind the firewall

2019-04-08 10:15:48,279 dhcpy6d INFO SOLICIT | TransactionID: a34999 | Answer: normal | ClientLLIP: fe80:0000:0000:0000:41ca:3c6a:1f47:d35a | Counter: 4 | DUID: 0001000124328d3c220f1ae9c908 | FQDN: WIN-NF0I0V95EFR | Hostname: win-nf0i0v95efr | IAID: 1200acc8 | IA_Options: [3] | ID: a34999 | Interface: eth2 | LastMessageReceivedType: 1 | MAC: 00:00:00:00:00:00 | OptionsRequest: [24, 23, 17, 39] | VendorClassData: MSFT 5.0 | VendorClassEN: 311 2019-04-08 10:15:48,281 dhcpy6d INFO REPLY | TransactionID: a34999 | Options: [13] 2019-04-08 10:15:50,284 dhcpy6d INFO SOLICIT | TransactionID: a34999 | Answer: normal | ClientLLIP: fe80:0000:0000:0000:41ca:3c6a:1f47:d35a | Counter: 5 | DUID: 0001000124328d3c220f1ae9c908 | FQDN: WIN-NF0I0V95EFR | Hostname: win-nf0i0v95efr | IAID: 1200acc8 | IA_Options: [3] | ID: a34999 | Interface: eth2 | LastMessageReceivedType: 1 | MAC: 00:00:00:00:00:00 | OptionsRequest: [24, 23, 17, 39] | VendorClassData: MSFT 5.0 | VendorClassEN: 311 2019-04-08 10:15:50,287 dhcpy6d INFO REPLY | TransactionID: a34999 | Options: [13] 2019-04-08 10:15:50,290 dhcpy6d INFO SOLICIT | TransactionID: a34999 | Answer: normal | ClientLLIP: fe80:0000:0000:0000:41ca:3c6a:1f47:d35a | Counter: 6 | DUID: 0001000124328d3c220f1ae9c908 | FQDN: WIN-NF0I0V95EFR | Hostname: win-nf0i0v95efr | IAID: 1200acc8 | IA_Options: [3] | ID: a34999 | Interface: eth2 | LastMessageReceivedType: 1 | MAC: 00:00:00:00:00:00 | OptionsRequest: [24, 23, 17, 39] | VendorClassData: MSFT 5.0 | VendorClassEN: 311 2019-04-08 10:15:50,292 dhcpy6d INFO REPLY | TransactionID: a34999 | Options: [13]

Close the logs behind the firewall

2019-04-08 10:16:47,834 dhcpy6d INFO SOLICIT | TransactionID: 2b5c81 | Answer: normal | ClientLLIP: fe80:0000:0000:0000:41ca:3c6a:1f47:d35a | Counter: 1 | DUID: 0001000124328d3c220f1ae9c908 | FQDN: WIN-NF0I0V95EFR | Hostname: win-nf0i0v95efr | IAID: 1200acc8 | IA_Options: [3] | ID: 2b5c81 | Interface: eth2 | LastMessageReceivedType: 1 | MAC: 00:00:00:00:00:00 | OptionsRequest: [24, 23, 17, 39] | VendorClassData: MSFT 5.0 | VendorClassEN: 311 2019-04-08 10:16:47,839 dhcpy6d INFO ADVERTISE | TransactionID: 2b5c81 | Options: [3, 7, 23, 24, 39] | Addresses: 2607:fcd0:fa80:3400:278e:c728:3349:25f3 2607:fcd0:fa80:3400:2981:b21f:457b:8b32 | Class: fixed | Hostname: 7BL76UAB 2019-04-08 10:16:47,877 dhcpy6d INFO SOLICIT | TransactionID: 2b5c81 | Answer: normal | ClientLLIP: fe80:0000:0000:0000:41ca:3c6a:1f47:d35a | Counter: 2 | DUID: 0001000124328d3c220f1ae9c908 | FQDN: WIN-NF0I0V95EFR | Hostname: win-nf0i0v95efr | IAID: 1200acc8 | IA_Options: [3] | ID: 2b5c81 | Interface: eth2 | LastMessageReceivedType: 1 | MAC: a2:a2:2a:29:00:cf | OptionsRequest: [24, 23, 17, 39] | VendorClassData: MSFT 5.0 | VendorClassEN: 311 2019-04-08 10:16:47,877 dhcpy6d INFO ADVERTISE | TransactionID: 2b5c81 | Options: [3, 7, 23, 24, 39] | Addresses: 2607:fcd0:fa80:3400:278e:c728:3349:25f3 2607:fcd0:fa80:3400:2981:b21f:457b:8b32 | Class: fixed | Hostname: 7BL76UAB 2019-04-08 10:16:48,885 dhcpy6d INFO REQUEST | TransactionID: 2b5c81 | Answer: normal | ClientLLIP: fe80:0000:0000:0000:41ca:3c6a:1f47:d35a | Counter: 3 | DUID: 0001000124328d3c220f1ae9c908 | FQDN: WIN-NF0I0V95EFR | Hostname: win-nf0i0v95efr | IAID: 1200acc8 | IA_Options: [3] | ID: 2b5c81 | Interface: eth2 | LastMessageReceivedType: 3 | MAC: a2:a2:2a:29:00:cf | OptionsRequest: [24, 23, 17, 39] | VendorClassData: MSFT 5.0 | VendorClassEN: 311

I found that I could not get the MAC after opening the firewall

But Linux is normal

HenriWahl commented 5 years ago

So the Windows clients are outside that firewall, but in the same network segment as dhcpy6d? Like the Linux clients?

It works if the proxmox firewall is disabled, right?

HenriWahl commented 5 years ago

At https://pve.proxmox.com/wiki/Firewall there is not much to find about IPv6. Maybe you can ask the developers too about this issue?

xiamaohan commented 5 years ago

I also think dhcpy6d works.It's only proxmox, which nobody answered and came here for help. Thanks

HenriWahl commented 4 years ago

Apparently nothing more to do.