DHCP send option not sent

[nemric]

Hi,

I've upgraded today for the new release, and my vlan vlan don't go online.

my config :
vlan100 on em1
assigned to an interface with options :
- spoof mac : xx:xx:xx:xx...
- send option : vendor-class-identifier "BYGTELIAD"

I've run a packet capture and only options :
53 DHCP message
50 requested ip
61 client identifier
12 host name
55 parameter request list
255 END

are sent

Option 60 vendor-class-identifier is missing

It was working like a charm before upgrade so it seems that it's a regression

[nivek1612]

I think I'm seeing the same issue with a remote connection in France which I upgraded over VPN
No IP is allocated which suggest the send options are not being passed as Orange France have special options in order to grant an IP
As I'm remote I can't wire shark the output
Thankfully I have a failover connection so can apply any patch/upgrade to fix it

[isamudaison]

For my VLAN firewall rules, I found I had to remove the 'gateway' associated with the 'allow any' rule for traffic to correctly flow outside my network from said VLAN.

[nivek1612]

It's not firewall rule on vlan that's the issue it's the option not being passed when a dhcp request is made to the isp servers

[nemric]

I can't believe it's true....
I went back to 21.7.8 (and VLAN is up) and I've made a packet capture for dhcp

The captures are the same execpt for 1 thing :
option (53) DHCP Message Type is discover for v22.1
option (53) DHCP Message Type is request for v21.7

in both cases I can't see option 60 vendor-class-identifier :/

I've removed this option (vendor-class-identifier "BYGTELIAD") from interface settings and it works :/

I won't have more time today to investigate deeper, see you later

[nivek1612]

when you say it works I assume only at 21.7 NOT at 22.1

[nemric]

you're right, I'm now back to 21.7

[nivek1612]

Did you have to re-image to do that. I'm remote so only have a failover connection to gain access

[nemric]

Yes I had to reinstall form an USB key. I didn't find any way to downgrade

[marjohn56]

The dhclient looks like the default FreeBSD one, not the one that was modified to work with OR France etc.

[marjohn56]

@nemric  - Seems the version from 21.7 is working OK, at least on my test device so I'm attaching it here. No guarentees, but try it. At least you have a local device and can revert. @nivek1612 is concerned he might lose everyhing if he tries, so would you try it and let us know? Remember to set the permissions to 0555 after copying the attached to /sbin .

[s4rs]

I am having Internet access issues post 22.1 upgrade. I did a tcpdump on the WAN interface when connecting to my ISP. A DHCP address is being offered and accepted but I get no traffic. Can't ping, nothing is getting out. Strange..

[franco]

> The dhclient looks like the default FreeBSD one, not the one that was modified to work with OR France etc.

Well yes and no. The relevant change should be emulated by https://github.com/opnsense/src/commit/50ecd99be523 but I make no claim it works as intended as it's not our work.

Having both the upstream commit and our old modification was an impossible situation.

Might also be another change upstream that interferes. Nobody seems to have looked closely enough with the setup at hand.


Cheers,
Franco

[marjohn56]

Yes I can see it... came from over the road. IIRC ours had a bit more to it than that. Can you point me at the changes we made to dhclient and I'll have a looksee tomorrow.

[marjohn56]

I am having Internet access issues post 22.1 upgrade. I did a tcpdump on the WAN interface when connecting to my ISP. A DHCP address is being offered and accepted but I get no traffic. Can't ping, nothing is getting out. Strange..

If you are getting a WAN v4 address, then it's not the client causing you issues. Try some deeper diagnostics from the WAN interface, ping 8.8.8.8 for example, if that works then try a ping to www.google.com, that will prove if the dns ( unbound ) is working. My test system which is running 22.1 is working fine, and it's a simple dual stack setup.