Linux

具有動態引導範圍聲明的 DHCP 伺服器故障轉移

  • December 9, 2021

我正在嘗試為在具有動態引導範圍聲明的 Linux 上執行的 ISC dhcp 伺服器配置故障轉移。

配置文件看起來像這樣(我首先在本地嘗試,因此是私有範圍):

authoritative;
log-facility local7;
shared-network "vm-net" {
failover peer "failover-partner" {
    secondary;
    address 192.168.122.4;
    port 647;
    peer address 192.168.122.3;
    peer port 647;
    max-response-delay 60;
    max-unacked-updates 10;
    load balance max seconds 3;
}
 subnet 192.168.122.0 netmask 255.255.255.128 {
     pool {
         failover peer "failover-partner";
         max-lease-time 1800;
         range 192.168.122.0 192.168.122.127;
     }   
   deny unknown-clients;
 }
 subnet 192.168.122.128 netmask 255.255.255.128 {
     pool {
         failover peer "failover-partner";
         max-lease-time 1800;
         range dynamic-bootp 192.168.122.128 192.168.122.255;
     }   
   deny unknown-clients;
 }
}

但是,守護程序重新載入失敗並顯示以下 syslog 錯誤消息:

Dec  7 14:59:07 dhcpmaster1 dhcpd[4397]: range declarations where there is a failover
Dec  7 14:59:07 dhcpmaster1 dhcpd[4397]: peer in scope.   If you wish to declare an
Dec  7 14:59:07 dhcpmaster1 dhcpd[4397]: address range from which dynamic bootp leases
Dec  7 14:59:07 dhcpmaster1 dhcpd[4397]: can be allocated, please declare it within a
Dec  7 14:59:07 dhcpmaster1 dhcpd[4397]: pool declaration that also contains the "no
Dec  7 14:59:07 dhcpmaster1 dhcpd[4397]: failover" statement.   The failover protocol
Dec  7 14:59:07 dhcpmaster1 dhcpd[4397]: itself does not permit dynamic bootp - this
Dec  7 14:59:07 dhcpmaster1 dhcpd[4397]: is not a limitation specific to the ISC DHCP
Dec  7 14:59:07 dhcpmaster1 dhcpd[4397]: server.   Please don't ask me to defend this
Dec  7 14:59:07 dhcpmaster1 dhcpd[4397]: until you have read and really tried to understand
Dec  7 14:59:07 dhcpmaster1 dhcpd[4397]: the failover protocol specification.
Dec  7 14:59:07 dhcpmaster1 dhcpd[4397]: Configuration file errors encountered -- exiting

這是否意味著 ISC dhcp 協議不支持動態範圍的故障轉移?或者有沒有其他方法可以配置它?

我在手冊頁中找不到任何進一步的資訊,並且 isc.org 似乎已關閉/無法訪問。

任何建議將不勝感激。

從您自己的日誌輸出:

故障轉移協議本身不允許動態引導 - 這不是特定於 ISC DHCP 伺服器的限制。在您閱讀並真正嘗試理解故障轉移協議規範之前,請不要讓我為這一點辯護。

故障轉移協議不支持 bootp 故障轉移,因此不限於 ISC DHCP 伺服器。

閱讀https://datatracker.ietf.org/doc/html/draft-ietf-dhc-failover-12#page-42可以獲得更多見解。

引用自:https://serverfault.com/questions/1085828