dhcp server failing to lease. am I missing something? fastiiron gs 648 runnung layer 3

[frank_b_ddyl3qt]

i'm trying to set up a dhcp server on my gs648p running layer 3. nothing gets a lease from it.

this is my log

0d00h07m38s:A:DHCPS: Exhausts all allocation methods, no address pool found from received port 1
0d00h07m29s:A:DHCPS: unable to find an address pool for rx port 1, dropping DHCPOFFER message
0d00h07m29s:A:DHCPS: Exhausts all allocation methods, no address pool found from received port 1
0d00h07m21s:A:DHCPS: unable to find an address pool for rx port 1, dropping DHCPOFFER message
0d00h07m21s:A:DHCPS: Exhausts all allocation methods, no address pool found from received port 1
0d00h07m13s:A:DHCPS: unable to find an address pool for rx port 1, dropping DHCPOFFER message
0d00h07m13s:A:DHCPS: Exhausts all allocation methods, no address pool found from received port 1
0d00h07m04s:A:DHCPS: unable to find an address pool for rx port 1, dropping DHCPOFFER message
0d00h07m04s:A:DHCPS: Exhausts all allocation methods, no address pool found from received port 1
0d00h07m00s:A:DHCPS: unable to find an address pool for rx port 1, dropping DHCPOFFER message
0d00h07m00s:A:DHCPS: Exhausts all allocation methods, no address pool found from received port 1
BR-r2>

here's my config
ver 07.2.02aT7e1
!
module 1 fgs-48-port-management-module
!
!
!
!
vlan 1 name DEFAULT-VLAN by port
 router-interface ve 1
!
vlan 10 by port
 untagged ethe 0/1/1 to 0/1/2 ethe 0/1/13 to 0/1/14
 router-interface ve 10
!
!
!
!
!
!
!
!
aaa authentication web-server default local
aaa authentication enable default local
boot sys fl sec
hostname r2
ip dhcp snooping vlan 10
ip dhcp-server enable
ip dhcp-server server-identifier 192.168.1.4
!
ip dhcp-server pool studios
 dhcp-default-router 192.168.1.4
 dns-server 192.168.1.4
 domain-name lincolncityradio.com
 excluded-address 192.168.11.150
 excluded-address 192.168.11.1 192.168.11.20
 excluded-address 192.168.11.101 192.168.11.120
 excluded-address 192.168.11.201 192.168.11.210
 excluded-address 192.168.11.240 192.168.11.254
 lease 0 2 0
 network 192.168.11.0 255.255.255.0
 deploy
!
ip dns domain-name lincolncityradio.com
username tech password .....
web-management enable vlan 1
no port bootp
interface ethernet 0/1/1
 dhcp snooping trust
!
interface ethernet 0/1/2
 dhcp snooping trust
!
interface ethernet 0/1/13
 dhcp snooping trust
!
interface ethernet 0/1/14
 dhcp snooping trust
!
interface ve 1
 ip address 10.10.1.4 255.255.255.0
 ip address 192.168.1.4 255.255.255.0
!
interface ve 10
 ip address 10.10.10.252 255.255.255.0
 ip address 192.168.11.4 255.255.255.0
!
!
!
!
!
!
ip ssh  source-interface ve 1
!
!
end

as you can see i have bound the dhcp to the ports on vlan 10 bu it fails to lease. am i missing something?

thank you.

[mohand_sellal]

Hi Frank,

With your new config it should work. I have just tested it and it worked as you can see below:

!

vlan 1 name DEFAULT-VLAN by port

 router-interface ve 1

!

vlan 10 by port

 tagged ethe 1/1/1

 router-interface ve 10

!

!

enable acl-per-port-per-vlan

hostname ICX-6450-48-209122

ip dhcp snooping vlan 10

ip dhcp-server enable

ip dhcp-server server-identifier 192.168.11.4

!

ip dhcp-server pool studios

 dhcp-default-router 192.168.11.4

 dns-server 192.168.11.4

 domain-name lincolncityradio.com

 excluded-address 192.168.11.150

 excluded-address 192.168.11.21

 excluded-address 192.168.11.22

 excluded-address 192.168.11.23

 excluded-address 192.168.11.24

 excluded-address 192.168.11.25

 excluded-address 192.168.11.26

 excluded-address 192.168.11.1 192.168.11.20

 excluded-address 192.168.11.101 192.168.11.120

 excluded-address 192.168.11.201 192.168.11.210

 excluded-address 192.168.11.240 192.168.11.254

 lease 0 2 0

 network 192.168.11.0 255.255.255.0

 deploy

!

!

clock timezone us Alaska

!

!

interface management 1

 no ip dhcp-client enable

!

interface ethernet 1/1/1

 dhcp snooping trust

!

interface ve 1

 ip address 192.168.1.4 255.255.255.0

!

interface ve 10

 ip address 192.168.11.4 255.255.255.0

!

!

lldp run

!

!

end

ICX-6450-48-209122#sho ip dhcp-ser bin

Bindings from all pools:

        IP Address    Client-ID/        Lease expiration Type

                      Hardware address

     192.168.11.28    0050.56b8.f96b   000d:01h:59m:28s   Automatic

Please remove the no port bootp from the config as that it’s blocking the bootp packets and DHCP won’t work. (you need to enter “port bootp”)

0d00h02m33s:A:DHCPS: unable to find an address pool for rx port 1, dropping DHCPOFFER message ---->  Indicates that the DHCP service was unable to match an address pool for the interface where the DHCP discover was received.

0d00h00m26s:W:DHCPS: Failed to read lease-binding database to flash ---> shows up when the DHCP server is stopped you will need to deploy it each time when you make any changes in the DHCP pool

I suggest removing DHCP snooping and try it. There is an old defect in the version that you are running (ver 07.2.02a) that causes the DHCP Discover packet to not be broadcasted within the incoming VLAN, which most likely why it’s not working for you . The recommended version from the FGS that has the fix for this is ver 07.2.02r

Thanks

[frank_b_ddyl3qt]

thanks but my new config doesn't have  the no bootp option. also i changed the pool 10 192.168.10 rather than 11 which now matches ve10 ip. still not working though. 

[mohand_sellal]

Please update your code to 07202r.

From above config we see no port bootp just above the eth 0/1/25,

no port bootp
interface ethernet 0/1/25
dual-mode

Do you have the DHCP client directly connected to the switch? have you ran a pcap to see if the DHCP Discover into the switch?

Thanks,

[frank_b_ddyl3qt]

that's odd. i did not port that in. How do i turn that off?  and how do i update my code to 07202r. ?

[mohand_sellal]

To remove the no port bootp from the config you need to enter “port bootp”

Here is the link to download the code the https://support.ruckuswireless.com/software?filter=125#firmwares

Ruckus FastIron code 07.2.02r applies to your GS648P