DHCP Server (Dynamic Host Configuration Protocol)

Installation

apt install isc-dhcp-server

Für den IPv4 Betrieb des DHCP Servers in der Datei /etc/default/isc-dhcp-server den Eintrag INTERFACESv4="" mit dem Interface der Brückenschnittstelle füllen.

Für den IPv6 Betrieb des DHCP Servers in der Datei /etc/default/isc-dhcp-server den Eintrag INTERFACESv6="" mit dem Interface der Brückenschnittstelle füllen.

Konfiguation

Inhalt von /etc/dhcp/dhcpd.conf für IPv4.

# This file is managed by Salt, do not edit.

#
# Sample configuration file for ISC dhcpd for Debian
#
# Attention: If /etc/ltsp/dhcpd.conf exists, that will be used as
# configuration file instead of this file.
#
#

# The ddns-updates-style parameter controls whether or not the server will
# attempt to do a DNS update when a lease is confirmed. We default to the
# behavior of the version 2 packages ('none', since DHCP v2 didn't
# have support for DDNS.)
#ddns-update-style none;

# option definitions common to all supported networks...
#option domain-name "example.org";
#option domain-name-servers ns1.example.org, ns2.example.org;

#default-lease-time 600;
#max-lease-time 7200;

# If this DHCP server is the official DHCP server for the local
# network, the authoritative directive should be uncommented.
#authoritative;

# Use this to send dhcp log messages to a different log file (you also
# have to hack syslog.conf to complete the redirection).
#log-facility local7;

# No service will be given on this subnet, but declaring it helps the
# DHCP server to understand the network topology.

#subnet 10.152.187.0 netmask 255.255.255.0 {
#}

# This is a very basic subnet declaration.

#subnet 10.254.239.0 netmask 255.255.255.224 {
#  range 10.254.239.10 10.254.239.20;
#  option routers rtr-239-0-1.example.org, rtr-239-0-2.example.org;
#}

# This declaration allows BOOTP clients to get dynamic addresses,
# which we don't really recommend.

#subnet 10.254.239.32 netmask 255.255.255.224 {
#  range dynamic-bootp 10.254.239.40 10.254.239.60;
#  option broadcast-address 10.254.239.31;
#  option routers rtr-239-32-1.example.org;
#}

# A slightly different configuration for an internal subnet.
#subnet 10.5.5.0 netmask 255.255.255.224 {
#  range 10.5.5.26 10.5.5.30;
#  option domain-name-servers ns1.internal.example.org;
#  option domain-name "internal.example.org";
#  option subnet-mask 255.255.255.224;
#  option routers 10.5.5.1;
#  option broadcast-address 10.5.5.31;
#  default-lease-time 600;
#  max-lease-time 7200;
#}

# Hosts which require special configuration options can be listed in
# host statements.   If no address is specified, the address will be
# allocated dynamically (if possible), but the host-specific information
# will still come from the host declaration.

#host passacaglia {
#  hardware ethernet 0:0:c0:5d:bd:95;
#  filename "vmunix.passacaglia";
#  server-name "toccata.fugue.com";
#}

# Fixed IP addresses can also be specified for hosts.   These addresses
# should not also be listed as being available for dynamic assignment.
# Hosts for which fixed IP addresses have been specified can boot using
# BOOTP or DHCP.   Hosts for which no fixed address is specified can only
# be booted with DHCP, unless there is an address range on the subnet
# to which a BOOTP client is connected which has the dynamic-bootp flag
# set.
#host fantasia {
#  hardware ethernet 08:00:07:26:c0:a5;
#  fixed-address fantasia.fugue.com;
#}

# You can declare a class of clients and then do address allocation
# based on that.   The example below shows a case where all clients
# in a certain class get addresses on the 10.17.224/24 subnet, and all
# other clients get addresses on the 10.0.29/24 subnet.

#class "foo" {
#  match if substring (option vendor-class-identifier, 0, 4) = "SUNW";
#}

#shared-network 224-29 {
#  subnet 10.17.224.0 netmask 255.255.255.0 {
#    option routers rtr-224.example.org;
#  }
#  subnet 10.0.29.0 netmask 255.255.255.0 {
#    option routers rtr-29.example.org;
#  }
#  pool {
#    allow members of "foo";
#    range 10.17.224.10 10.17.224.250;
#  }
#  pool {
#    deny members of "foo";
#    range 10.0.29.10 10.0.29.230;
#  }
#}

ddns-update-style none;

authoritative;

server-name "{{ server_name }}";

default-lease-time {{ default_lease_time }};
max-lease-time {{ max_lease_time }};
min-lease-time {{ min_lease_time }};

log-facility {{ log_facility }};

subnet {{ subnet }} netmask {{ netmask }} {
    range {{ range_start }} {{ range_end }};
    option routers {{ routers }};
    option domain-name-servers {{ domain_name_servers }};
    option domain-search "{{ domain_search }}";
    option ntp-servers {{ ntp_servers }};
    option interface-mtu {{ interface_mtu }};
}

Inhalt von /etc/dhcp/dhcpd6.conf für IPv6.

# This file is managed by Salt, do not edit.

#
# Sample configuration file for ISC dhcpd for Debian
#
# Attention: If /etc/ltsp/dhcpd.conf exists, that will be used as
# configuration file instead of this file.
#
#

# The ddns-updates-style parameter controls whether or not the server will
# attempt to do a DNS update when a lease is confirmed. We default to the
# behavior of the version 2 packages ('none', since DHCP v2 didn't
# have support for DDNS.)
#ddns-update-style none;

# option definitions common to all supported networks...
#option domain-name "example.org";
#option domain-name-servers ns1.example.org, ns2.example.org;

#default-lease-time 600;
#max-lease-time 7200;

# If this DHCP server is the official DHCP server for the local
# network, the authoritative directive should be uncommented.
#authoritative;

# Use this to send dhcp log messages to a different log file (you also
# have to hack syslog.conf to complete the redirection).
#log-facility local7;

# No service will be given on this subnet, but declaring it helps the
# DHCP server to understand the network topology.

#subnet 10.152.187.0 netmask 255.255.255.0 {
#}

# This is a very basic subnet declaration.

#subnet 10.254.239.0 netmask 255.255.255.224 {
#  range 10.254.239.10 10.254.239.20;
#  option routers rtr-239-0-1.example.org, rtr-239-0-2.example.org;
#}

# This declaration allows BOOTP clients to get dynamic addresses,
# which we don't really recommend.

#subnet 10.254.239.32 netmask 255.255.255.224 {
#  range dynamic-bootp 10.254.239.40 10.254.239.60;
#  option broadcast-address 10.254.239.31;
#  option routers rtr-239-32-1.example.org;
#}

# A slightly different configuration for an internal subnet.
#subnet 10.5.5.0 netmask 255.255.255.224 {
#  range 10.5.5.26 10.5.5.30;
#  option domain-name-servers ns1.internal.example.org;
#  option domain-name "internal.example.org";
#  option subnet-mask 255.255.255.224;
#  option routers 10.5.5.1;
#  option broadcast-address 10.5.5.31;
#  default-lease-time 600;
#  max-lease-time 7200;
#}

# Hosts which require special configuration options can be listed in
# host statements.   If no address is specified, the address will be
# allocated dynamically (if possible), but the host-specific information
# will still come from the host declaration.

#host passacaglia {
#  hardware ethernet 0:0:c0:5d:bd:95;
#  filename "vmunix.passacaglia";
#  server-name "toccata.fugue.com";
#}

# Fixed IP addresses can also be specified for hosts.   These addresses
# should not also be listed as being available for dynamic assignment.
# Hosts for which fixed IP addresses have been specified can boot using
# BOOTP or DHCP.   Hosts for which no fixed address is specified can only
# be booted with DHCP, unless there is an address range on the subnet
# to which a BOOTP client is connected which has the dynamic-bootp flag
# set.
#host fantasia {
#  hardware ethernet 08:00:07:26:c0:a5;
#  fixed-address fantasia.fugue.com;
#}

# You can declare a class of clients and then do address allocation
# based on that.   The example below shows a case where all clients
# in a certain class get addresses on the 10.17.224/24 subnet, and all
# other clients get addresses on the 10.0.29/24 subnet.

#class "foo" {
#  match if substring (option vendor-class-identifier, 0, 4) = "SUNW";
#}

#shared-network 224-29 {
#  subnet 10.17.224.0 netmask 255.255.255.0 {
#    option routers rtr-224.example.org;
#  }
#  subnet 10.0.29.0 netmask 255.255.255.0 {
#    option routers rtr-29.example.org;
#  }
#  pool {
#    allow members of "foo";
#    range 10.17.224.10 10.17.224.250;
#  }
#  pool {
#    deny members of "foo";
#    range 10.0.29.10 10.0.29.230;
#  }
#}

ddns-update-style none;

authoritative;

server-name "{{ server_name }}";

default-lease-time {{ default_lease_time }};
max-lease-time {{ max_lease_time }};
min-lease-time {{ min_lease_time }};

log-facility {{ log_facility }};

# Global definitions for name server address(es)
option dhcp6.name-servers {{ name_servers }};

subnet6 {{ subnet }} {
}

TODO: IP Ranges anpassen, IPv6 Krams nachschauen und die Konfigurationsdateien anpassen.

Salt State File

isc-dhcp-server.sls

# DHCP Server (Dynamic Host Configuration Protocol)

{% set dhcp = salt['grains.filter_by']({
  'Debian': {
    'pkg': 'isc-dhcp-server',
    'srv': 'isc-dhcp-server'
  },
}, default='Debian') %}

{{ dhcp.pkg }}:
  pkg.installed:
    - name: {{ dhcp.pkg }}
  service.running:
    - name: {{ dhcp.srv }}
    - enable: True

{% if pillar['dhcp']['ipv6']['enable'] == True %}
{{ dhcp.srv }}6:
  service.running:
    - name: {{ dhcp.srv }}6
    - enable: True
    - require:
      - pkg: {{ dhcp.pkg }}
{% endif %}

# Todo: Interface for IPv6
{% if pillar['dhcp']['ipv6']['enable'] == True %}
{% set pattern = '^(|#)INTERFACESv6="(.*)$"'%}
{% set repl = 'INTERFACESv6="%s"' % pillar['network']['bridge']['interface'] %}
{% endif %}

{% set pattern = '^(|#)INTERFACESv4="(.*)$"'%}
{% set repl = 'INTERFACESv4="%s"' % pillar['network']['bridge']['interface'] %}
/etc/default/isc-dhcp-server:
  file.replace:
    - name: /etc/default/isc-dhcp-server
    - pattern: {{ pattern }}
    - repl: {{ repl }}
    - append_if_not_found: True
    - require:
      - pkg: {{ dhcp.pkg }}
    - listen_in:
      - service: {{ dhcp.srv }}
      {% if pillar['dhcp']['ipv6']['enable'] == True %}
      - service: {{ dhcp.srv }}6
      {% endif %}

/etc/dhcp/dhcpd.conf:
  file.managed:
    - name: /etc/dhcp/dhcpd.conf
    - source: salt://gateway/etc/dhcp/dhcpd.conf
    - user: root
    - group: root
    - mode: 644
    - template: jinja
    - defaults:
        subnet: {{ pillar['dhcp']['ipv4']['subnet'] }}
        netmask: {{ pillar['dhcp']['ipv4']['netmask'] }}
        range_start: {{ salt['pillar.get']('dhcp:ipv4:' + salt['grains.get']('id', "") + ':range_start', "") }}
        range_end: {{ pillar['dhcp']['ipv4'][grains.id]['range_end'] }}
        routers: {{ pillar['dhcp']['ipv4']['routers'] }}
        domain_name_servers: {{ pillar['dhcp']['ipv4']['domain_name_servers'] }}
        interface_mtu: {{ pillar['dhcp']['interface_mtu'] }}
        default_lease_time: {{ pillar['dhcp']['default_lease_time'] }}
        max_lease_time: {{ pillar['dhcp']['max_lease_time'] }}
        min_lease_time: {{ pillar['dhcp']['min_lease_time'] }}
        log_facility: {{ pillar['dhcp']['log_facility'] }}
        server_name: {{ grains['id'] }}
        ntp_servers: {{ pillar['dhcp']['ipv4']['ntp_servers'] }}
        domain_search: {{ pillar['dhcp']['domain_search'] }}
    - require:
      - pkg: {{ dhcp.pkg }}
    - listen_in:
      - service: {{ dhcp.srv }}

{% if pillar['dhcp']['ipv6']['enable'] == True %}
/etc/dhcp/dhcpd6.conf:
  file.managed:
    - name: /etc/dhcp/dhcpd6.conf
    - source: salt://gateway/etc/dhcp/dhcpd6.conf
    - user: root
    - group: root
    - mode: 644
    - template: jinja
    - defaults:
        subnet: {{ pillar['dhcp']['ipv6']['subnet'] }}
        server_name: {{ grains['id'] }}
        ntp_servers: {{ pillar['dhcp']['ipv4']['ntp_servers'] }}
        name_servers: {{ pillar['dhcp']['ipv6']['domain_name_servers'] }}
        domain_search: {{ pillar['dhcp']['domain_search'] }}
    - require:
      - pkg: {{ dhcp.pkg }}
    - listen_in:
      - service: {{ dhcp6.srv }}6
{% endif %}