Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 10 replies
  • Answers 1 answer
  • Subscribers 27 subscribers
  • Views 19574 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Static DHCP assignments broken with multi-boot client?

chetwisniewski

[Mod Note: Related KBA - Sophos Firewall: Static IP assignment for dual boot system]

I think this might be a bug, but not sure where the best place to ask/report it is.

I assigned a static IP address to my primary Linux workstation (10.144.1.10/ac:ef:1b:66:23:1a), everything works as expected. I reboot the PC into Windows 10, again as expected I get my static assignment and everything works. When I reboot from Windows back into Linux the firewall refuses to assign me an IP. When I sniff I see a DHCP REQ and immediately a DHCP NAK from the XG. If I delete the static assignment on the firewall I then get a random address from the pool. If I then re-add the static address everything works again until I boot Windows 10.

Thoughts?



Related KBA
[edited by: FloSupport at 8:55 AM (GMT -8) on 8 Nov 2021]
Parents
  • 0

    Hi,

    Greetings.

    Try upgrading to SF-OS MR 1.1 :)

    Thanks

    Sachin Gurung

  • 0 in reply to sachingurung

    still isn´t working - ver (SFOS 17.0.5 MR-5)

     

    It is very inconvenient for us.

    With regards

  • 0 in reply to Jiri Hadamek

    Hi,

    this might seem like a dumb question, do you restart or power off and on?

    Ian

  • 0 in reply to rfcat_vk

    I cannot say that I understand your question.

    After every firmware upgrade we rebooted. And problem exhibited itself AFTER reboot from Windows to Linux.

    We have this problem more than two years - dual boot machine LIN/WIN. This problem is easily reproducible from ver 15.X firmware.

     

    We found only one very clumsy workaround.

    - Remove MAC from static DHCP list and save (in XG network configuration)

    - Reboot workstation - it get address from dynamic pool

    - Add static MAC into list again adn save

    - Reboot workstation - it gets correct address.

    If we had reboot workstation again into "second - different" system - it doesn´t get address from DHCP server. If we rebooted to "previous" system, it get address correctly.

     

    I hope this help to understand our (and not only our) problem.

     

     

     

  • 0 in reply to Jiri Hadamek

    What I am asking is if you actually turn the power off before changing between operating systems? The XG DHCP server will more than likely still an active lease because the lease will not have expired and from memory Windows and LINUX do address requests differently.

    Ian

  • 0 in reply to rfcat_vk

    Hi,

    we looked into this problem several times.

    And  - yes - the problem is the same if we did cold shutdown and start or simply restarted.

    We sniffed for LAN packets with Wireshark and found this: If "another system" want IP address via "DHCP REQUEST" packet, it didn´t get ANY answer from Sophos XG if their Ethernet MAC  is assigned already in DHCP Sophos XG table.

     

  • 0 in reply to Jiri Hadamek

    Sadly this appears to be intentional. I would escalate it as a bug/feature request. There is a workaround:

    To overcome from the issue, you can enable below feature through  CLI

Command :  console> system dhcp one-lease-per-client enable
  • 0 in reply to chetwisniewski

    I think, that some misunderstanding persisted.

    I cannot believe that it is intentional. If I try several times get IP address from DHCP server, i GOT IT (restart, shutdown and start, ifconfig /renew etc. etc.).

    If I start different system ON THE SAME HARDWARE or with the SAME MAC address on THE SAME LAN CABLE, then i won´t get answer from DHCP server if my MAC address is in lease table on Sophos firewall.

    We catched all network traffic and we cannot se any major difference in LAN packets to DHCP server.

Reply
  • 0 in reply to chetwisniewski

    I think, that some misunderstanding persisted.

    I cannot believe that it is intentional. If I try several times get IP address from DHCP server, i GOT IT (restart, shutdown and start, ifconfig /renew etc. etc.).

    If I start different system ON THE SAME HARDWARE or with the SAME MAC address on THE SAME LAN CABLE, then i won´t get answer from DHCP server if my MAC address is in lease table on Sophos firewall.

    We catched all network traffic and we cannot se any major difference in LAN packets to DHCP server.

Children
No Data