Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 7 subscribers
  • Views 1964 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

New IP address despite lease time

Frank Reichenbach

Hello

I became a message that I ran out of the 50 licensed IPs, although I never had that many devices active.

Then I realized that the DHCP server gave out new IP address to some devices without respecting the lease time (86400 as per default), so I think this is a bug.

For example the device with mac address d8:d4:3c:d2:87:b5 got 5 leases throughout one day with 3 different IP addresses:

2021:04:17-09:13:52 fw dhcpd: DHCPOFFER on 192.168.4.156 to d8:d4:3c:d2:87:b5 via eth3
2021:04:17-09:13:52 fw dhcpd: DHCPREQUEST for 192.168.4.156 (192.168.4.253) from d8:d4:3c:d2:87:b5 via eth3
2021:04:17-09:13:52 fw dhcpd: DHCPACK on 192.168.4.156 to d8:d4:3c:d2:87:b5 (STR-DN850 D287B5) via eth3
2021:04:17-10:02:47 fw dhcpd: reuse_lease: lease age 2935 (secs) under 25% threshold, reply with unaltered, existing lease for 192.168.4.156
2021:04:17-10:02:47 fw dhcpd: ICMP Echo reply while lease 192.168.4.156 valid.
2021:04:17-10:02:47 fw dhcpd: Abandoning IP address 192.168.4.156: pinged before offer

2021:04:17-10:02:52 fw dhcpd: DHCPOFFER on 192.168.4.157 to d8:d4:3c:d2:87:b5 via eth3
2021:04:17-10:02:52 fw dhcpd: DHCPREQUEST for 192.168.4.157 (192.168.4.253) from d8:d4:3c:d2:87:b5 via eth3
2021:04:17-10:02:52 fw dhcpd: DHCPACK on 192.168.4.157 to d8:d4:3c:d2:87:b5 (STR-DN850 D287B5) via eth3
2021:04:17-10:38:51 fw dhcpd: reuse_lease: lease age 2159 (secs) under 25% threshold, reply with unaltered, existing lease for 192.168.4.157
2021:04:17-10:38:52 fw dhcpd: DHCPOFFER on 192.168.4.157 to d8:d4:3c:d2:87:b5 (STR-DN850 D287B5) via eth3
2021:04:17-10:38:52 fw dhcpd: reuse_lease: lease age 2160 (secs) under 25% threshold, reply with unaltered, existing lease for 192.168.4.157
2021:04:17-10:38:52 fw dhcpd: DHCPREQUEST for 192.168.4.157 (192.168.4.253) from d8:d4:3c:d2:87:b5 (STR-DN850 D287B5) via eth3
2021:04:17-10:38:52 fw dhcpd: DHCPACK on 192.168.4.157 to d8:d4:3c:d2:87:b5 (STR-DN850 D287B5) via eth3

2021:04:17-14:42:58 fw dhcpd: DHCPOFFER on 192.168.4.158 to d8:d4:3c:d2:87:b5 via eth3
2021:04:17-14:42:58 fw dhcpd: DHCPREQUEST for 192.168.4.158 (192.168.4.253) from d8:d4:3c:d2:87:b5 via eth3
2021:04:17-14:42:58 fw dhcpd: DHCPACK on 192.168.4.158 to d8:d4:3c:d2:87:b5 (STR-DN850 D287B5) via eth3
2021:04:17-16:46:51 fw dhcpd: reuse_lease: lease age 7433 (secs) under 25% threshold, reply with unaltered, existing lease for 192.168.4.158
2021:04:17-16:46:52 fw dhcpd: DHCPOFFER on 192.168.4.158 to d8:d4:3c:d2:87:b5 (STR-DN850 D287B5) via eth3
2021:04:17-16:46:59 fw dhcpd: reuse_lease: lease age 7441 (secs) under 25% threshold, reply with unaltered, existing lease for 192.168.4.158
2021:04:17-16:47:00 fw dhcpd: DHCPOFFER on 192.168.4.158 to d8:d4:3c:d2:87:b5 (STR-DN850 D287B5) via eth3
2021:04:17-16:47:00 fw dhcpd: reuse_lease: lease age 7442 (secs) under 25% threshold, reply with unaltered, existing lease for 192.168.4.158
2021:04:17-16:47:00 fw dhcpd: DHCPREQUEST for 192.168.4.158 (192.168.4.253) from d8:d4:3c:d2:87:b5 (STR-DN850 D287B5) via eth3
2021:04:17-16:47:00 fw dhcpd: DHCPACK on 192.168.4.158 to d8:d4:3c:d2:87:b5 (STR-DN850 D287B5) via eth3

2021:04:17-14:37:54 fw dhcpd: reuse_lease: lease age 16502 (secs) under 25% threshold, reply with unaltered, existing lease for 192.168.4.157
2021:04:17-14:37:55 fw dhcpd: DHCPOFFER on 192.168.4.157 to d8:d4:3c:d2:87:b5 (STR-DN850 D287B5) via eth3
2021:04:17-14:37:55 fw dhcpd: reuse_lease: lease age 16503 (secs) under 25% threshold, reply with unaltered, existing lease for 192.168.4.157
2021:04:17-14:37:55 fw dhcpd: DHCPREQUEST for 192.168.4.157 (192.168.4.253) from d8:d4:3c:d2:87:b5 (STR-DN850 D287B5) via eth3
2021:04:17-14:37:55 fw dhcpd: DHCPACK on 192.168.4.157 to d8:d4:3c:d2:87:b5 (STR-DN850 D287B5) via eth3
2021:04:17-14:42:52 fw dhcpd: reuse_lease: lease age 16800 (secs) under 25% threshold, reply with unaltered, existing lease for 192.168.4.157
2021:04:17-14:42:52 fw dhcpd: ICMP Echo reply while lease 192.168.4.157 valid.
2021:04:17-14:42:52 fw dhcpd: Abandoning IP address 192.168.4.157: pinged before offer

2021:04:17-17:28:26 fw dhcpd: reuse_lease: lease age 9928 (secs) under 25% threshold, reply with unaltered, existing lease for 192.168.4.158
2021:04:17-17:28:27 fw dhcpd: DHCPOFFER on 192.168.4.158 to d8:d4:3c:d2:87:b5 (STR-DN850 D287B5) via eth3
2021:04:17-17:28:27 fw dhcpd: reuse_lease: lease age 9929 (secs) under 25% threshold, reply with unaltered, existing lease for 192.168.4.158
2021:04:17-17:28:27 fw dhcpd: DHCPREQUEST for 192.168.4.158 (192.168.4.253) from d8:d4:3c:d2:87:b5 (STR-DN850 D287B5) via eth3
2021:04:17-17:28:27 fw dhcpd: DHCPACK on 192.168.4.158 to d8:d4:3c:d2:87:b5 (STR-DN850 D287B5) via eth3
2021:04:17-17:56:13 fw dhcpd: reuse_lease: lease age 11595 (secs) under 25% threshold, reply with unaltered, existing lease for 192.168.4.158
2021:04:17-17:56:14 fw dhcpd: DHCPOFFER on 192.168.4.158 to d8:d4:3c:d2:87:b5 (STR-DN850 D287B5) via eth3
2021:04:17-17:56:14 fw dhcpd: reuse_lease: lease age 11596 (secs) under 25% threshold, reply with unaltered, existing lease for 192.168.4.158
2021:04:17-17:56:14 fw dhcpd: DHCPREQUEST for 192.168.4.158 (192.168.4.253) from d8:d4:3c:d2:87:b5 (STR-DN850 D287B5) via eth3
2021:04:17-17:56:14 fw dhcpd: DHCPACK on 192.168.4.158 to d8:d4:3c:d2:87:b5 (STR-DN850 D287B5) via eth3
2021:04:17-19:14:40 fw dhcpd: reuse_lease: lease age 16302 (secs) under 25% threshold, reply with unaltered, existing lease for 192.168.4.158
2021:04:17-19:14:41 fw dhcpd: DHCPOFFER on 192.168.4.158 to d8:d4:3c:d2:87:b5 (STR-DN850 D287B5) via eth3
2021:04:17-19:14:41 fw dhcpd: reuse_lease: lease age 16303 (secs) under 25% threshold, reply with unaltered, existing lease for 192.168.4.158
2021:04:17-19:14:41 fw dhcpd: DHCPREQUEST for 192.168.4.158 (192.168.4.253) from d8:d4:3c:d2:87:b5 (STR-DN850 D287B5) via eth3
2021:04:17-19:14:41 fw dhcpd: DHCPACK on 192.168.4.158 to d8:d4:3c:d2:87:b5 (STR-DN850 D287B5) via eth3
2021:04:17-20:32:54 fw dhcpd: reuse_lease: lease age 20996 (secs) under 25% threshold, reply with unaltered, existing lease for 192.168.4.158
2021:04:17-20:32:54 fw dhcpd: ICMP Echo reply while lease 192.168.4.158 valid.
2021:04:17-20:32:54 fw dhcpd: Abandoning IP address 192.168.4.158: pinged before offer

As this happened everyday this resulted in 28 "active" IPs counting towards the licensed 50.
I now assigned a static IP to this MAC, but I will remain over the 50 IPs for some time now, blocking other devices. Is there a way to have this duplicate IPs removed?



This thread was automatically locked due to age.
  • 0

    If you have IPv6 and IPv4 enabled, they will both take an IP address (two IPs instead of just one) against your limit, just FYI in case you are doing this and didn't know about that caveat.  Slight smile

    The IP release thing has been a problem for years with UTM, and it's not addressed other then them telling you to wait on lease expiration.  There used to be some workarounds, but they "fixed the glitch".  

    OPNSense 64-bit | Intel Xeon 4-core v3 1225 3.20Ghz
    16GB Memory | 500GB SSD HDD | ATT Fiber 1GB
    (Former Sophos UTM Veteran, Former XG Rookie)

  • 0 in reply to Amodin

    yes I know that IPv6 and IPv4 count both, that's bascially why I haven't enabled IPv6...

    In my opinion they should count the MAC adresses as unique identifier for the devices or kick the IP from the list when the DHCP lease expires.

    Anyhow I wanted to see if the behaviour of the DHCP Server is a bug as it gives out different IP addresses to the same mac when the lease shouldn't have expired yet.

  • 0

    Hallo Frank and welcome to the UTM Community!

    What happens if you delete the DHCP server for 192.168.4.x and create a new one - do other devices continue to get different IPs?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    That's basically what I did and so far no different IPs for the same device, but I'm still over the 50 licensed IPss for a couple of days more

Unfiltered HTML