Infoblox and iPXE

[mcb30]

(2014-11-11 05:35)jov0 Wrote:  Michael here is an example output for when the Firewall is enabled and cuts off the dhcp acknowledgement from 172.23.223.141. Because 10.64.38.20 is physically closer, 172.23.223.141 acks almost always come in second and consequently are dropped by the firewall. This is a combination of design issues between infoblox's fail over setup and Cisco's firewall abilities for this variety of traffic. We do not see the same behavior using Etherboot or gPXE in that it either they do not care who is sending the ack or are making the request against first offer versus the last. I would test this for sure, but the last gpxe src from 2011 does not compile.

Thanks. Are you able to disable either of the DHCP servers from responding to the initial DHCPDISCOVER?

If not, then as a workaround you could delete the check in dhcp_request_rx() in net/udp/dhcp.c:

Code:

if ( server_id.s_addr != dhcp->server.s_addr )
  return;

Michael