• Recent
    • Unsolved
    • Tags
    • Popular
    • Users
    • Groups
    • Search
    • Register
    • Login

    UEFI pxe boot problem from a network

    Scheduled Pinned Locked Moved Solved
    Windows Problems
    3
    67
    14.3k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • L
      lebrun78
      last edited by lebrun78

      Hello,

      On one vlan you can not pxe boot a uefi system, but on the same vlan you can pxe boot a bios based computer? Yes

      On a second vlan you can pxe boot both a uefi system and a bios based system no problem? Yes, the vlan the fog server is on.

      Here is the capture from the wittness host:

      No.     Time           Source                Destination           Protocol Length Info
            1 0.000000000    0.0.0.0               255.255.255.255       DHCP     389    DHCP Discover - Transaction ID 0xea2ea26c
      
      Frame 1: 389 bytes on wire (3112 bits), 389 bytes captured (3112 bits) on interface 0
      Ethernet II, Src: Dell_83:5c:4b (10:65:30:83:5c:4b), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
      Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
      User Datagram Protocol, Src Port: 68, Dst Port: 67
      Dynamic Host Configuration Protocol (Discover)
      
      No.     Time           Source                Destination           Protocol Length Info
            2 1.001404071    148.60.10.252         255.255.255.255       DHCP     343    DHCP Offer    - Transaction ID 0xea2ea26c
      
      Frame 2: 343 bytes on wire (2744 bits), 343 bytes captured (2744 bits) on interface 0
      Ethernet II, Src: Dell_82:50:7e (50:9a:4c:82:50:7e), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
      Internet Protocol Version 4, Src: 148.60.10.252, Dst: 255.255.255.255
      User Datagram Protocol, Src Port: 67, Dst Port: 68
      Dynamic Host Configuration Protocol (Offer)
      
      No.     Time           Source                Destination           Protocol Length Info
            3 3.271384044    0.0.0.0               255.255.255.255       DHCP     401    DHCP Request  - Transaction ID 0xea2ea26c
      
      Frame 3: 401 bytes on wire (3208 bits), 401 bytes captured (3208 bits) on interface 0
      Ethernet II, Src: Dell_83:5c:4b (10:65:30:83:5c:4b), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
      Internet Protocol Version 4, Src: 0.0.0.0, Dst: 255.255.255.255
      User Datagram Protocol, Src Port: 68, Dst Port: 67
      Dynamic Host Configuration Protocol (Request)
      
      No.     Time           Source                Destination           Protocol Length Info
            4 3.404871387    148.60.10.252         255.255.255.255       DHCP     343    DHCP ACK      - Transaction ID 0xea2ea26c
      
      Frame 4: 343 bytes on wire (2744 bits), 343 bytes captured (2744 bits) on interface 0
      Ethernet II, Src: Dell_82:50:7e (50:9a:4c:82:50:7e), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
      Internet Protocol Version 4, Src: 148.60.10.252, Dst: 255.255.255.255
      User Datagram Protocol, Src Port: 67, Dst Port: 68
      Dynamic Host Configuration Protocol (ACK)
      
      

      Thank you very much for your help.

      george1421G 1 Reply Last reply Reply Quote 0
      • L
        lebrun78
        last edited by

        In
        UEFI Reading the DHCP offer on boot, router ip et subnet mask are wrong. (ip router and subnet mask of the vlan of fog server).

        In legacy mode, (same PC, same vlan)
        router ip et subnet mask are wrong too. (ip router and subnet mask of the vlan of fog server). But the boot is going on
        capturedhcp.txt

        1 Reply Last reply Reply Quote 0
        • george1421G
          george1421 Moderator @lebrun78
          last edited by

          @lebrun78 would you upload the entire pcap. I need to see the raw data and not just the packet headers.

          Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG!

          1 Reply Last reply Reply Quote 0
          • L
            lebrun78
            last edited by

            here is a uefi capture:

            capturedhcp.pcap

            george1421G 1 Reply Last reply Reply Quote 0
            • george1421G
              george1421 Moderator @lebrun78
              last edited by

              @lebrun78 Please look at the forum chat (chat bubble at the top of the forum window) for a few questions based on the pcap.

              Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG!

              L 1 Reply Last reply Reply Quote 0
              • S
                Sebastian Roth Moderator
                last edited by

                @lebrun78 said in UEFI pxe boot problem from a network:

                router ip et subnet mask are wrong

                I think this is key to the mystery here!

                Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)

                Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG

                george1421G 1 Reply Last reply Reply Quote 0
                • george1421G
                  george1421 Moderator @Sebastian Roth
                  last edited by

                  @Sebastian-Roth I agree, also in the pcap it has the bootp pxe boot information (in the header) but not the dhcp pxe boot options (66 & 67). Some target systems look at the ethernet header and others look at the dhcp options to boot.

                  I didn’t try to figure out the funky subnet mask (255.255.248.0) to make sure all of the subnets defined were in range. I figured everything was close enough it should work.

                  Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG!

                  1 Reply Last reply Reply Quote 0
                  • L
                    lebrun78
                    last edited by

                    Several vlan:

                    • 148.60.0.0 255.255.248.0 (148.60.0.0 > 148.60.7.255)
                      (fog server vlan 148.60.4.1, dhcp 148.60.4.3 router 148…60.7.254

                    • 148.60.8.0 255.255.255.0 (148.60.8.0 > 148.60.8.255)
                      router 148…60.8.254 no dhcp

                    • 148.60.10.0 255.255.255.0 (148.60.10.0 > 148.60.10.255)
                      dhcp 148.60.10.252 router 148…60.10.254 (vlan with deployment problem)

                    • 148.60.11.0 255.255.255.0 (148.60.11.0 > 148.60.11.255)
                      dhcp 148.60.11.248 router 148…60.11.254

                    • 148.60.12.0 255.255.255.0 (148.60.12.0 > 148.60.12.255)
                      dhcp 148.60.11.252 router 148…60.12.254

                    • 148.60.13.0 255.255.255.0 (148.60.13.0 > 148.60.13.255)
                      dhcp 148.60.13.248 router 148…60.13.254

                    • 148.60.14.0 255.255.255.0 (148.60.14.0 > 148.60.14.255)
                      dhcp 148.60.14.252 router 148…60.14.254

                    • 148.60.15.0 255.255.255.0 (148.60.15.0 > 148.60.15.255)
                      dhcp 148.60.15.109 (its native vlan) router 148…60.15.254

                    1 Reply Last reply Reply Quote 0
                    • L
                      lebrun78 @george1421
                      last edited by lebrun78

                      @george1421
                      Here is the capture from fog server, client in uefi mode
                      uefi.pcap

                      george1421G 1 Reply Last reply Reply Quote 0
                      • george1421G
                        george1421 Moderator @lebrun78
                        last edited by george1421

                        @lebrun78 Well I’m not sure how to explain this situation but @Sebastian-Roth is spot on.

                        First the easy part, it appears there are 2 dhcp servers (or configurations) involved here. The reason why I say that is that they are giving different responses to the pxe boot request. If you look at the pcap on the working subnet it responds with dhcp option 12, the not working pcap does not include dhcp option 12. This is only important to show there are different settings for these two pcaps.

                        Now to the hard part to explain.

                        On the working subnet
                        Client IP: 148.60.3.152
                        Subnet Mask: 255.255.248.0
                        Gateway: 148.60.7.254
                        Subnet Range: 148.60.0.1-148.60.7.254

                        On the not working subnet.
                        Client IP: 148.60.10.193
                        Subnet Mask: 255.255.248.0
                        Gateway: 148.60.7.254
                        Subnet Range: 148.60.8.1-148.60.15.254

                        So now to identify the problem. If you look at the not working subnet you will see the gateway IP address is outside of the usable range of the client’s IP address. The gateway address is 148.60.7.254 but the subnet base address is 148.60.8.0. So its not possible for the client to reach the router to get outside of the subnet to connect to the FOG server at 148.60.4.1. At this time the problem is infrastructure related and not FOG.

                        Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG!

                        L 1 Reply Last reply Reply Quote 1
                        • L
                          lebrun78 @george1421
                          last edited by

                          @george1421
                          “At this time the problem is infrastructure related and not FOG.” I agree.
                          I don’t understand the boot dhcp response on vlan 10.
                          The ip configuration is good when loaded !

                          george1421G 1 Reply Last reply Reply Quote 0
                          • S
                            Sebastian Roth Moderator
                            last edited by

                            @lebrun78 said in UEFI pxe boot problem from a network:

                            The ip configuration is good when loaded !

                            You mean when Windows boots it’s correct?

                            Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)

                            Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG

                            L 1 Reply Last reply Reply Quote 0
                            • george1421G
                              george1421 Moderator @lebrun78
                              last edited by

                              @lebrun78 said in UEFI pxe boot problem from a network:

                              I don’t understand the boot dhcp response on vlan 10.

                              Looking at the dhcp packet from your main dhcp server its giving out the wrong default router address for this subnet. So any computer that uses dhcp should not be able to connect to any device beyond its local subnet. Its impossible since the router its being told to use to leave the local subnet, is on a different subnet to start with.

                              You should contact your infrastructure staff and ask they to confirm the dhcp settings are correct for this subnet. If I had to guess, I would think they just copied the settings from the subnet where your FOG server is and pasted them into the vlan 10 subnet configuration and missed the router value. But that is only a guess made from 6600km away.

                              Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG!

                              L 1 Reply Last reply Reply Quote 0
                              • L
                                lebrun78 @Sebastian Roth
                                last edited by

                                @Sebastian-Roth
                                Yes ipconfig is good.

                                1 Reply Last reply Reply Quote 0
                                • L
                                  lebrun78 @george1421
                                  last edited by

                                  @george1421
                                  I’m the infrastructure manager, the dhcpd.conf is the one in the first post …

                                  george1421G 1 Reply Last reply Reply Quote 0
                                  • george1421G
                                    george1421 Moderator @lebrun78
                                    last edited by

                                    @lebrun78 I’m going to have to look into this, but I have to ask the question why does the dhcp servers have two different IP addresses? Those each are listed in the pcaps.

                                    Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG!

                                    L 1 Reply Last reply Reply Quote 0
                                    • L
                                      lebrun78
                                      last edited by

                                      This post is deleted!
                                      1 Reply Last reply Reply Quote 0
                                      • L
                                        lebrun78 @george1421
                                        last edited by

                                        @george1421

                                        Yes, we don’t have dhcp relay, the dhcp server have several virtual network interface, one on each vlan.

                                        george1421G 1 Reply Last reply Reply Quote 0
                                        • george1421G
                                          george1421 Moderator @lebrun78
                                          last edited by Sebastian Roth

                                          @lebrun78 I can’t see from the config how/why its sending out the wrong router address unless something in include "/etc/dhcp/vip.conf"; is doing it.

                                          Wait, there is something strange going on here. Look at the base address and the subnet mask as defined.

                                          subnet 148.60.10.0 netmask 255.255.255.0 {
                                          ##########################################
                                          option domain-name-servers 148.60.15.109,148.60.15.106 ;
                                          option domain-name "istic.univ-rennes1.fr" ;
                                          option routers 148.60.10.254 ;
                                          option subnet-mask 255.255.255.0 ;
                                          default-lease-time 600 ;
                                          max-lease-time 1200 ;
                                          
                                          group {
                                          # On commente les deux lignes suivantes pour éviter le menu de Fog
                                                  next-server 148.60.4.1;
                                          

                                          But look at the pcap what the client is being told.
                                          pcap_error.png

                                          As you see in the picture the client is being told that its subnet mask is 255.255.248.0, but your config files says 255.255.255.0. The client is being told the router is 148.60.7.254 but your config file says 148.60.10.254.

                                          So I’ll ask you the same question again in a different way. Is dhcp server 148.60.10.252 and 148.60.4.3 the same computer? If it is do you have 2 different instances of isc-dhcp server running, where each instance is bound to a different network interface? Something is strange with the 148.60.10.252 dhcp server.

                                          Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG!

                                          L 1 Reply Last reply Reply Quote 0
                                          • L
                                            lebrun78 @george1421
                                            last edited by lebrun78

                                            @george1421

                                            So I’ll ask you the same question again in a different way. Is dhcp server 148.60.10.252 and 148.60.4.3 the same computer?
                                            YES
                                            I have only one dhcpd.conf file, sone only one instance of dhcp

                                            Here is what I get on the same machine on vlan 148.60.10.0/24 when windows is loaded:
                                            Capture.PNG

                                            It’s crazy, no ?

                                            1 Reply Last reply Reply Quote 0
                                            • 1
                                            • 2
                                            • 3
                                            • 4
                                            • 2 / 4
                                            • First post
                                              Last post

                                            251

                                            Online

                                            12.0k

                                            Users

                                            17.3k

                                            Topics

                                            155.2k

                                            Posts
                                            Copyright © 2012-2024 FOG Project