Project

General

Profile

Actions
Copy link

Bug #16200

open

KEA DHCPv6 allows for invalid static mapping to be configured, leading to server start failure

Added by Patrik Stahlman 7 days ago. Updated 6 days ago.

Status:
Confirmed
Priority:
Normal
Assignee:
-
Category:
DHCP Server (IPv6)
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Release Notes:
Default
Affected Plus Version:
25.03
Affected Architecture:
All

Description

(in version 25.03.b.20250515.1415)

I accidently specified a static mapping address in the format used on tracking interfaces (::12) on an interface that uses static IPv6. The configuration was accepted but when applied there were these error messages in the log, and the DHCPv6 server failed to start:

May 23 09:54:09 pfsense kea-dhcp6[88263]: ERROR [kea-dhcp6.dhcp6.0x391c5e012000] DHCP6_PARSER_FAIL failed to create or run parser for configuration element subnet6: specified reservation '::12' is not within the IPv6 subnet '2001:470:28:d45::/64'
May 23 09:54:09 pfsense kea-dhcp6[88263]: ERROR [kea-dhcp6.dhcp6.0x391c5e012000] DHCP6_CONFIG_LOAD_FAIL configuration error
using file: /usr/local/etc/kea/kea-dhcp6.conf, reason: specified reservation '::12' is not within the IPv6 subnet '2001:XXX:XXX:XXX::/64'
May 23 09:54:09 pfsense kea-dhcp6[88263]: ERROR [kea-dhcp6.dhcp6.0x391c5e012000] DHCP6_INIT_FAIL failed to initialize Kea server: configuration error using file '/usr/local/etc/kea/kea-dhcp6.conf': specified reservation '::12' is not within the IPv6 subnet '2001:XXX:XXX:XXX::/64'

Files

clipboard-202505240919-rfd8l.png (309 KB) clipboard-202505240919-rfd8l.png Lev Prokofev, 05/24/2025 06:19 AM
Actions
Copy link
 #1

Updated by Lev Prokofev 6 days ago

I can confirm this behavior, the validation should be added.

Tested on

25.03-BETA (amd64)
built on Tue May 20 16:55:00 MSK 2025
FreeBSD 15.0-CURREN

Logs: 
May 24 09:20:50    kea-dhcp6    55039    WARN [kea-dhcp6.dhcp6.0xace84212000] DHCP6_RESERVATIONS_LOOKUP_FIRST_ENABLED Multi-threading is enabled and host reservations lookup is always performed first.
May 24 09:20:50    kea-dhcp6    55039    ERROR [kea-dhcp6.dhcp6.0xace84212000] DHCP6_PARSER_FAIL failed to create or run parser for configuration element subnet6: specified reservation '::12' is not within the IPv6 subnet '2001:XXX:XXXX:XXX::/124'
May 24 09:20:50    kea-dhcp6    55039    ERROR [kea-dhcp6.dhcp6.0xace84212000] DHCP6_CONFIG_LOAD_FAIL configuration error using file: /usr/local/etc/kea/kea-dhcp6.conf, reason: specified reservation '::12' is not within the IPv6 subnet '2001:XXX:XXXX:XXX::/124'
May 24 09:20:50    kea-dhcp6    55039    ERROR [kea-dhcp6.dhcp6.0xace84212000] DHCP6_INIT_FAIL failed to initialize Kea server: configuration error using file '/usr/local/etc/kea/kea-dhcp6.conf': specified reservation '::12' is not within the IPv6 subnet '2001:XXX:XXXX:XXX::/124'

Actions
Copy link

Also available in: Atom PDF