mir/kea
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/kea synced 2025-09-01 14:35:29 +00:00
Code Issues Releases Wiki Activity

[#3252] hub-and-spoke/radius incompatibility

Browse Source 
The subnet reselect in RADIUS is incompatible with the hub-and-spoke.
Added suitable notes in the ARM.
This commit is contained in:
Marcin Siodelski
2024-05-22 14:24:48 +02:00
parent 38838d7647
commit 281f34b083
2 changed files with 17 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
doc/sphinx/arm/ext-radius.rst
View File

@@ -388,6 +388,15 @@ other than Discover and the first Request from each client.
than global. Loading the RADIUS hook library in a Kea DHCP server than global. Loading the RADIUS hook library in a Kea DHCP server
that has this configuration raises an error. that has this configuration raises an error.
.. note::
Currently the ``reselect-subnet-address`` and ``reselect-subnet-pool``
parameters are incompatible with the hub-and-spoke configuration of the
:ischooklib:`libdhcp_ha.so`. This hook library uses an originally
selected subnet for choosing an HA relationship to process a packet.
The subnet reslection may interefere with this choice. See the
:ref:`ha-hub-and-spoke` for details.
.. _radius-server-example: .. _radius-server-example:
RADIUS Server Setup Example RADIUS Server Setup Example

8
doc/sphinx/arm/hooks-ha.rst
View File

@@ -2607,3 +2607,11 @@ branch ``server3``:
The peer names in the branch servers must match the peer names in the respective central The peer names in the branch servers must match the peer names in the respective central
server's relationships, because these names are used for signaling between the HA partners. server's relationships, because these names are used for signaling between the HA partners.
.. note::
The hub-and-spoke configuration is currently incompatible with the ``reselect-subnet-address``
and ``reselect-subnet-pool`` parameters of the :ischooklib:`libdhcp_radius.so`. The High
Availability hook library uses an originally selected subnet for choosing an HA relationship
to process a packet. The subnet reslection may interefere with this choice. See the
:ref:`radius-config` for details.