Browsing through it, nothing catches my eye; but I was thinking service logs generally tell you where it fails at.
Jason Creviston Sr. Network Administrator P: 765-795-9305 2 S. West Street - P.O. Box 237, Cloverdale, IN 46120 Book an appointment with me!<https://outlook.office365.com/owa/calendar/[email protected]/bookings/> [cid:codetwo-signature-logo-endeavor_1c9b8f6f-f797-4b22-a7d8-b9c8f1b0c327.png] [cid:codetwo-gigtel-logo2_e109b7e4-b185-40fc-94f2-947f96c612cf.png] [cid:endeavor-it-signature-2_cad37e9b-ad7b-4219-a677-f37914c8d32a.png] weEndeavor.com<http://weendeavor.com/> GigTel.com<http://gigtel.com/> EndeavorIT.com<http://EndeavorIT.com> CONFIDENTIALITY NOTICE: The information in this Email and my attachments are confidential and may be privileged. This Email is intended solely for the named recipient or recipients. If you are not the intended recipient, any use, disclosure, copying or distribution of this Email is prohibited. If you are not the intended recipient, please inform us by replying with the subject line "Wrong Address" and then delete this Email and any attachments. Endeavor Communications uses regularly updated anti-virus software in an attempt to reduce the possibility of transmitting computer viruses. We do not guarantee, however, that any attachments to this Email are virus-free. ________________________________ From: Kea-users <[email protected]> on behalf of Brent Miles via Kea-users <[email protected]> Sent: Tuesday, July 15, 2025 11:20 AM To: [email protected] <[email protected]> Cc: Brent Miles <[email protected]> Subject: [Kea-users] Shared Network with Radius Hook CAUTION: This email is from OUTSIDE our organization. Please do not open/download any attachment or click any link unless you know it's safe. I am trying to configure the following setup. I have a dhcp relay, a kea dhcp server, and a freeradius server. Requests come into the relay, then sent to the kea server, authorized by the radius server and address assigned by kea. I also want to have address reservations assigned by the radius framed-ip attribute using the radius hook in kea. I have the following config (disregard the client class section, not using it) but the service fails to start. Any obvious issues with it? { "Dhcp4": { "host-reservation-identifiers": ["hw-address"], "interfaces-config": { "interfaces": [ "ens33" ] }, "control-socket": { "socket-type": "unix", "socket-name": "kea4-ctrl-socket" }, "lease-database": { "type": "mysql", "name": "dhcp", "user": "kea", "password": "abcdefghijk", "host": "localhost", "port": 3306 }, "expired-leases-processing": { "reclaim-timer-wait-time": 10, "flush-reclaimed-timer-wait-time": 25, "hold-reclaimed-time": 3600, "max-reclaim-leases": 100, "max-reclaim-time": 250, "unwarned-reclaim-cycles": 5 }, "renew-timer": 900, "rebind-timer": 1800, "valid-lifetime": 3600, "option-data": [ { "name": "domain-name-servers", "data": "8.8.8.8" } ], "client-classes": [ { "name": "voip", "test": "substring(option[60].hex,0,6) == 'Aastra'", "next-server": "192.0.2.254", "server-hostname": "hal9000", "boot-file-name": "/dev/null" } ], "hooks-libraries": [ { "library": "/usr/lib64/kea/hooks/libdhcp_lease_cmds.so" }, { "library": "/usr/lib64/kea/hooks/libdhcp_mysql.so" }, { "library": "/usr/lib64/kea/hooks/libdhcp_host_cache.so" }, { "library": "/usr/lib64/kea/hooks/libdhcp_radius.so", "parameters": { "identifier-type4": "hw-address", "reselect-subnet-address": false, "access": { "servers": [ { "name":"10.0.95.34", "port":1812, "secret":"testing123" } ], "attributes": [ { "name": "User-Name", "expr": "concat(concat(concat(concat(substring(hexstring(pkt4.mac, ''), 0, 4), '.'), substring(hexstring(pkt4.mac, ''), 4, 4)), '.'), substring(hexstring(pkt4.mac, ''), 8, 4))" } ] } } } ], "subnet4": [ { "id": 1, "subnet": "192.168.1.0/24", "pools": [ { "pool": "192.168.1.5 - 192.168.1.255" } ], "option-data": [ { "name": "routers", "data": "192.168.3.1" } ], "relay": { "ip-addresses": ["192.168.3.1"] } }, { "id": 2, "subnet": "192.168.2.0/24", "pools": [ { "pool": "192.168.2.5 - 192.168.2.255" } ], "option-data": [ { "name": "routers", "data": "192.168.3.1" } ], "relay": { "ip-addresses": ["192.168.3.1"] } } ], "loggers": [ { "name": "kea-dhcp4.radius-hooks", "output-options": [ { "output": "/var/log/kea/radius-hooks.log" } ], "severity": "DEBUG", "debuglevel": 99 }, { "name": "kea-dhcp4", "severity": "DEBUG", "output_options": [ { "output": "/var/log/kea/dhcp4.log", "maxver": 10 } ] }, { "name": "kea-dhcp4.dhcpsrv", "severity": "DEBUG", "output_options": [ { "output": "/var/log/kea/dhcp4-dhcpsrv.log", "maxver": 10 } ] }, { "name": "kea-dhcp4.leases", "severity": "DEBUG", "output_options": [ { "output": "/var/log/kea/dhcp4-leases.log", "maxver": 10 } ] } ] } } This message is intended only for the use of the individual or entity to which it is addressed and may contain information that is privileged, confidential, and exempt from disclosure under applicable law. Unintentional recipients are prohibited from disseminating, distributing, or copying the content of this message. If you have received this message in error, please delete it immediately and notify the sender.
-- ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users. Kea-users mailing list [email protected] https://lists.isc.org/mailman/listinfo/kea-users
