You can use Server groups, here an example <br><br><br><div>#sh config dhcp</div><div>Building configuration...</div><div><br></div><div>Current configuration:</div><div><br></div><div>!</div><div> interface subscriber-01 multibind lastresort</div>
<div> ip unnumbered lo3</div><div> dhcp proxy 100 server-group DHCP1</div><div>!</div><div>context local</div><div>!</div><div> dhcp relay option hostname</div><div> dhcp relay server retries 10 timeout 3</div><div> dhcp relay server 192.168.1.10</div>
<div> server-group DHCP1</div><div>!</div><div> dhcp relay server 192.168.1.15</div><div> server-group DHCP1<br><br><br><br></div>Chris O'Shea<br><br>
<br><br><div class="gmail_quote">On Thu, Oct 13, 2011 at 10:05 AM, Alexandre Chapellon <span dir="ltr"><<a href="mailto:a.chapellon@horoa.net">a.chapellon@horoa.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div bgcolor="#FFFFFF" text="#000000">
<br>
<br>
Le 13/10/2011 01:02, Christopher O'Shea a écrit :
<div class="im"><blockquote type="cite">Hi Alex,<br>
<br>
I seen this happen when you have manually bound the mulitbind
interface to a port. As i think its related to how the multibind
will only reply to ARP's (of the default gateway address) when
bound to a circuit. <br>
<br>
Can you post the config. <br>
<br>
</blockquote></div>
Unfortunately not, as I told I do not adminiter the redback
devices... I am just looking for some experiences like yours.<br>
I will forward your remarqs to the personns involved (which are not
used ti use mailing lists I guess).<br>
<br>
Any idea concerning point 2?<br>
<br>
Bests regards<div><div></div><div class="h5"><br>
<blockquote type="cite"><br clear="all">
Chris O'Shea<br>
<br>
<br>
<br>
<div class="gmail_quote">On Wed, Oct 12, 2011 at 10:33 PM,
Alexandre Chapellon <span dir="ltr"><<a href="mailto:a.chapellon@horoa.net" target="_blank">a.chapellon@horoa.net</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br>
<br>
Le 12/10/2011 13:03, Arjan Van Der Oest a écrit :
<div><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
On 12 okt. 2011, at 11:42, Alexandre Chapellon wrote:<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Wich leads me to the conclusion the subscriber should
not access the<br>
network anymore. Unfortuantely, on the CPE side, I can
still ping<br>
internet adresses and browse the web.<br>
How comes? Is it because of CLIPS itself being
connection-less? Is there<br>
something special to send in the CoA request? Is there
any alternative<br>
to shut network access for a specific subscriber using
CLIPS?<br>
</blockquote>
<br>
Maybe a silly question, but did you prevent that
subscriber from re-entering the network before CoA'ing
him/her? When you send the CoA disconnect and have a ping
running, do you see an interrupt in the replies?<br>
<br>
</blockquote>
</div>
Not that silly :)!<br>
In fact no I didn't prevent the user from re-entering the
network. But I also didn't see any new authentication request
following the CoA. The next authentication happens when DHCP
release expires (one hour for my tests).
<div>
<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
-- <br>
Met vriendelijke groet,<br>
<br>
Arjan van der Oest<br>
Senior Network Engineer / Security Officer<br>
<br>
Voiceworks BV - Editiestraat 29 - 1321 NG Almere<br>
<br>
<br>
<br>
</blockquote>
<br>
</div>
<div>
<div>
-- <br>
<<a href="http://www.horoa.net" target="_blank">http://www.horoa.net</a>><br>
<br>
Alexandre Chapellon<br>
<br>
Ingénierie des systèmes open sources et réseaux.<br>
Follow me on twitter: @alxgomz <<a href="http://www.twitter.com/alxgomz" target="_blank">http://www.twitter.com/alxgomz</a>><br>
<br>
_______________________________________________<br>
redback-nsp mailing list<br>
<a href="mailto:redback-nsp@puck.nether.net" target="_blank">redback-nsp@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/redback-nsp" target="_blank">https://puck.nether.net/mailman/listinfo/redback-nsp</a><br>
</div>
</div>
</blockquote>
</div>
<br>
</blockquote>
<br>
</div></div><div>-- <br>
<div style="min-height:77px;width:470px;background-color:#707070"><a href="http://www.horoa.net" target="_blank"><img style="border:none;float:left;margin-right:10px" src="cid:part1.03050603.07040300@horoa.net"></a><div class="im">
<p style="font-family:miso;font-size:18px;padding-top:8px;color:white">Alexandre Chapellon</p>
<p style="font-family:miso;font-size:18px;padding-top:0px;color:orange">Ingénierie des systèmes open sources et
réseaux.<br>
Follow me on twitter: <a href="http://www.twitter.com/alxgomz" target="_blank">@alxgomz</a></p>
</div></div>
</div>
</div>
<br>_______________________________________________<br>
redback-nsp mailing list<br>
<a href="mailto:redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/redback-nsp" target="_blank">https://puck.nether.net/mailman/listinfo/redback-nsp</a><br>
<br></blockquote></div><br>