FOG IP Address Change -- PxE Problems

[tlems]

@george1421 I’ll have to get this to you tomorrow as I’m currently home. I’ll PXE boot a machine and see what Wireshark brings up. Thanks!

[Sebastian Roth]

@tlems said in FOG IP Address Change -- PxE Problems:

I changed the IP’s in the Scope Options to the correct address but it still will not PxE boot.

Need more information. Error message on screen? Please post a picture.

[tlems]

@george1421 So our FOG server is on a Hyper-V on CentOS within our Server Subnet. Then we have our Client subnet which is all of our associates machines. You want me to put this third computer within our server subnet and do a wireshark packet capture or on the Client network and do a packet capture?

[george1421]

@tlems That would be on the client subnet. We need to see what the dhcp server(s) are telling the target computer. Since dhcp relies on broadcast messages we should be able to see the discover, offer, request, and ack packets. Now I do have to say I’ve seen some dhcp-relay services that switch over to unicast messaging on the client end. In this case we will only see the discover and request packets. But lets not go down that path just yet.

[tlems]

@sebastian-roth The error message is the same as before that I posted earlier.
https://i.imgur.com/LrkYp1d.png

[george1421]

@tlems said in FOG IP Address Change -- PxE Problems:

I posted earlier.

Just for reference, that screen shot is of a bios computer pxe booting. We are still down to understanding what the dhcp server is telling the pxe booting computer. The dhcp server is either telling the computer the wrong pxe boot address or boot file name. Its being told something because the error message says it can’t open the file and not, nothing was given.

[tlems]

@george1421 I did a filter for both 67 and 68 and I didn’t get anything back (tcp.port eq 67) and I also did a search for the PxE booting machine’s ip address (ip.addr eq 10.0.2.217 and also did source ip.src eq 10.0.2.217 to see if I saw anything from this machine) and nothing matched my results in Wireshark. The ip address of the third machine I was using is 10.0.2.90 so they’re on the same subnet.

[george1421]

@tlems the exact capture filter is “port 67 or port 68” if you captured everything then use a display filter of “bootp”. If you have one of us look at it be sure to use the capture filter so we don’t see things we shouldn’t in your capture.

[tlems]

@george1421 Whoops, my bad. I got the capture filter set this time instead of doing a display filter. Also, when I sent the picture earlier I was replying back to Sebastian Roth’s comment. What’s the best way to send you the pcap file? I’m unable to upload it here.

[george1421]

@tlems via a file share site like google drive or such. Just make sure you share it as public with the link. You can either chat me the link or post it here. Once we review the pcap you can take down the pcap. That way you have control of where and when its shared.

[Sebastian Roth]

@tlems From what I see this is not a “we have changed IP” issue but simply the server is in a different subnet now and hosts need to communicate across subnets via router/gateway. This router has to allow TFTP traffic. Talk to your network people.

And while you have them on the line you might also mention NFS, maybe also multicasting. Using FOG across subnets can be really tricky.

[george1421]

@sebastian-roth The OP has some things inconsistent in his dhcp settings. I’m working with him on chat. Its not currently a fog server issue.

[tlems]

Thank you both for your help! George and I were messaging back and forth and my DHCP policies and scopes were pretty messed up. Looking back I have no idea how it worked before. After completely changing them the machines are booting into FOG again just fine. Appreciate the quick responses!