• Dynamic Host Configuration Protocol
• Internet Systems Consortium, Inc. Mission-driven non-profit since 1994

• Stop DHCP From Changing resolv.conf

• Kea DHCP Modern, open source DHCPv4 & DHCPv6 server

root@gate:~# apt install isc-dhcp-server

root@gate:~# cat /etc/default/isc-dhcp-server

INTERFACESv4="eth0"
#INTERFACESv4="vlan2"
#INTERFACESv4="eth0 eth2"

• Установка и настройка DHCP сервера на Linux CentOS 7

gate# cat /etc/dhcp/dhcpd.conf

ddns-update-style none;
log-facility local7;

default-lease-time 600;
max-lease-time 7200;

option domain-name "corpX.un";
option domain-name-servers 192.168.X.10;
#option domain-name-servers 192.168.X.12;


#### For phone provisioning ####
#option file-server-name code 66 = string; # RFC 2132
#option file-server-address code 150 = ip-address; # RFC 5859 (Cisco)
#option file-server-name "server.corpX.un";
#option file-server-address 192.168.X.10;

#### For PXE ####
#allow booting;
#allow bootp;
#next-server 192.168.X.10;
#filename "pxelinux.0";
  
shared-network LAN1 {
  subnet 192.168.X.0 netmask 255.255.255.0 {
    range 192.168.X.101 192.168.X.109;
    option routers 192.168.X.1;
  }
}

#shared-network LAN2 {
#  subnet 192.168.113.0 netmask 255.255.255.0 {
#    range 192.168.113.101 192.168.113.109;
#    option routers 192.168.113.1;
#    next-server 192.168.X.10;
#    filename "pxe_lan2/pxelinux.0";
#  }
#}

#### For client config by mac ####
#host client3 {
#  hardware ethernet 00:12:f0:79:3b:51;
#  fixed-address 192.168.100+X.200;
#}

#### Digim D40 ####
#phone 407 {
#  hardware ethernet 00:0f:d3:06:11:d3; 
#  option file-server-name "http://server.corpX.un/";
#}

• !!! Синхронизируем время в системах !!! Сервис NTP
• man dhcpd.conf (DHCP FAILOVER)
• ISC DHCP Failover Configuration

nodeN# cat /etc/dhcp/dhcpd.general

ddns-update-style none;

log-facility local7;

subnet 192.168.X.0 netmask 255.255.255.0 {
  pool {
    failover peer "dhcp";
    range 192.168.X.128 192.168.X.228;
  }
  option routers 192.168.X.254;
  option domain-name "corpX.un";
  option domain-name-servers 192.168.X.1, 192.168.X.2;
  default-lease-time 600;
  max-lease-time 7200;
}

node1# cat /etc/dhcp/dhcpd.conf

failover peer "dhcp" {
  primary;
  address 192.168.X.1;
  port 519;
  peer address 192.168.X.2;
  peer port 520;
  max-response-delay 60;
  max-unacked-updates 10;
  mclt 600;
  split 128;
  load balance max seconds 3;
}

include "/etc/dhcp/dhcpd.general";

node2# cat /etc/dhcp/dhcpd.conf

failover peer "dhcp" {
  secondary;
  address 192.168.X.2;
  port 520;
  peer address 192.168.X.1;
  peer port 519;
  max-response-delay 60;
  max-unacked-updates 10;
  load balance max seconds 3;
}

include "/etc/dhcp/dhcpd.general";

• Сервис DNS Настройка поддержки динамических обновлений от DHCP сервера
• Adding static DNS entries on a dynamic BIND setup

server# cat dhcpd.conf

ddns-update-style interim;
ddns-ttl 60;
...
subnet 192.168.X.0 netmask 255.255.255.0 {

### ubuntu
#include "/etc/dhcp/rndc.key";

### freebsd
#include "/usr/local/etc/rndc.key";

  zone corpX.un. {
    primary 192.168.X.10;
    key rndc-key;
  }
  zone X.168.192.in-addr.arpa. {
    primary 192.168.X.10;
    key rndc-key;
  }
...

# dhcpd -t

# service isc-dhcp-server restart

# service isc-dhcp-server status

root@gate:~# dhcp-lease-list

root@gate:~# less /var/lib/dhcp/dhcpd.leases

root@gate:~# grep dhcp /var/log/syslog

• http://sourceforge.net/projects/dhcpd-pools/files/

# apt install dhcpd-pools

# dhcpd-pools

# dhcpd-pools -l /var/lib/dhcp/dhcpd.leases -c /etc/dhcp/dhcpd.conf

# cat /usr/local/bin/dhcp_stat.sh

#!/bin/sh

CMD='/usr/bin/dhcpd-pools -l /var/lib/dhcp/dhcpd.leases -c /etc/dhcp/dhcpd.conf -f c | grep 192.168.'
MAX=`eval $CMD | cut -d'"' -f8`
CUR=`eval $CMD | cut -d'"' -f10`

eval RES=\$$1

echo $RES

# /usr/local/bin/dhcp_stat.sh MAX

# /usr/local/bin/dhcp_stat.sh CUR

# pkg install dhcpd-pools

# dhcpd-pools -l /var/db/dhcpd/dhcpd.leases -c /usr/local/etc/dhcpd.conf

• Подавление DHCP серверов - dhcdrop

# wget http://www.netpatch.ru/projects/dhcdrop/dhcdrop-lin-0.5.tar.bz2

# tar -xvf /root/dhcdrop-lin-0.5.tar.bz2 -C /usr/local/sbin/ dhcdrop

# pkg install dhcdrop

# /usr/local/sbin/dhcdrop -b -i eth0 -c 2 -y

# /usr/local/sbin/dhcdrop -t -b -q -i <intface> -l <mac_address> > /tmp/dhcp.txt || (cat /tmp/dhcp.txt | mail -s 'Critical. Second DHCP.' root@corpX.un)