Infoblox and iPXE

[jov0]

(2014-11-10 15:30)mcb30 Wrote:  What's the exact message you get from DEBUG=dhcp which indicates the nature of the problem?

Michael

Michael here is an example output for when the Firewall is enabled and cuts off the dhcp acknowledgement from 172.23.223.141. Because 10.64.38.20 is physically closer, 172.23.223.141 acks almost always come in second and consequently are dropped by the firewall. This is a combination of design issues between infoblox's fail over setup and Cisco's firewall abilities for this variety of traffic. We do not see the same behavior using Etherboot or gPXE in that it either they do not care who is sending the ack or are making the request against first offer versus the last. I would test this for sure, but the last gpxe src from 2011 does not compile.