我试图为在Linux上运行的具有动态引导范围声明的ISC dhcp服务器配置故障转移。
配置文件如下所示(我首先在本地尝试,因此是私有范围):
authoritative;
log-facility local7;
shared-network "vm-net" {
failover peer "failover-partner" {
secondary;
address 192.168.122.4;
port 647;
peer address 192.168.122.3;
peer port 647;
max-response-delay 60;
max-unacked-updates 10;
load balance max seconds 3;
}
subnet 192.168.122.0 netmask 255.255.255.128 {
pool {
failover peer "failover-partner";
max-lease-time 1800;
range 192.168.122.0 192.168.122.127;
}
deny unknown-clients;
}
subnet 192.168.122.128 netmask 255.255.255.128 {
pool {
failover peer "failover-partner";
max-lease-time 1800;
range dynamic-bootp 192.168.122.128 192.168.122.255;
}
deny unknown-clients;
}
}
但是,守护进程重新加载失败,出现以下syslog错误消息:
Dec 7 14:59:07 dhcpmaster1 dhcpd[4397]: range declarations where there is a failover
Dec 7 14:59:07 dhcpmaster1 dhcpd[4397]: peer in scope. If you wish to declare an
Dec 7 14:59:07 dhcpmaster1 dhcpd[4397]: address range from which dynamic bootp leases
Dec 7 14:59:07 dhcpmaster1 dhcpd[4397]: can be allocated, please declare it within a
Dec 7 14:59:07 dhcpmaster1 dhcpd[4397]: pool declaration that also contains the "no
Dec 7 14:59:07 dhcpmaster1 dhcpd[4397]: failover" statement. The failover protocol
Dec 7 14:59:07 dhcpmaster1 dhcpd[4397]: itself does not permit dynamic bootp - this
Dec 7 14:59:07 dhcpmaster1 dhcpd[4397]: is not a limitation specific to the ISC DHCP
Dec 7 14:59:07 dhcpmaster1 dhcpd[4397]: server. Please don't ask me to defend this
Dec 7 14:59:07 dhcpmaster1 dhcpd[4397]: until you have read and really tried to understand
Dec 7 14:59:07 dhcpmaster1 dhcpd[4397]: the failover protocol specification.
Dec 7 14:59:07 dhcpmaster1 dhcpd[4397]: Configuration file errors encountered -- exiting
这是否意味着ISC dhcp协议不支持动态范围的故障转移?或者有没有其他方法来配置它?
我在手册页中找不到任何进一步的信息,而且isc.org似乎是向下/不可触及的。
如有任何建议,将不胜感激。
发布于 2021-12-09 21:44:51
从您自己的日志输出:
故障转移协议本身不允许动态引导-这不是ISC服务器特有的限制。请不要要求我为这一点辩护,直到你阅读并真正尝试理解故障转移协议规范。
故障转移协议不支持引导故障转移,因此它不限于ISC DHCP服务器。
阅读https://datatracker.ietf.org/doc/html/draft-ietf-dhc-failover-12#page-42提供了更多的见解。
https://serverfault.com/questions/1085828
复制相似问题