DHCP Kea - Security und Firewall Labor

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen

Installation

  • Damit Hosts im LAN automatisch eine IP-Adresse erlangen, konfigurieren wir nun einen DHCP Server (Befehle ab hier finden auf der Firewall statt!)
Debian
  • apt install -y kea
Rocky
  • dnf install -y kea

Konfiguration

  • vim /etc/kea/kea-dhcp4.conf 
{
  "Dhcp4": {
    "interfaces-config": {
      "interfaces": ["enp0s9"]
    },
    "option-data": [
      { "name": "domain-name", "data": "it2xx.int" },
      { "name": "domain-name-servers", "data": "10.88.2XX.21" }
    ],
    "valid-lifetime": 7200,
    "subnet4": [
      {
        "id": 1,  
        "subnet": "172.26.2XX.0/24",
        "pools": [{ "pool": "172.26.2XX.50 - 172.26.2XX.70" }],
        "option-data": [
          { "name": "routers", "data": "172.26.2XX.1" }
        ]
      }
    ]
  }
}
  • systemctl enable --now kea-dhcp4.service

Status

  • systemctl status kea-dhcp4.service
● kea-dhcp4.service - Kea IPv4 DHCP daemon
     Loaded: loaded (/usr/lib/systemd/system/kea-dhcp4.service; enabled)
     Active: active (running) since Wed 2025-04-16 09:27:35 CEST; 29min ago

Den DHCP neustarten

  • systemctl restart kea-dhcp4.service

Client neustarten

  • sudo reboot
testen ob die IP-Adresse passt
Abgerufen von „http://wiki.ixheim.de/index.php?title=DHCP_Kea_-_Security_und_Firewall_Labor&oldid=69566“