7.3. Configuring the DHCPv6 server for network boot

Procedure

1. Install the DHCP server:

   # dnf install kea

2. Set up a DHCPv6 server. Enter the following configuration in the /etc/kea/kea-dhcp6.conf file. Replace the addresses to match your network card.

   {
     "Dhcp6": {
       "interfaces-config": {
         "interfaces": [ "enp1s0" ]
       },
       "subnet6": [
         {
           "id": 1,
           "subnet": "fd33::/64",
           "interface": "enp1s0",
           "pools": [
             {
               "pool": "fd33::100-fd33::200"
             }
           ]
         }
       ],
       "client-classes": [
         {
           "name": "uefi PXE Clients",
           "test": "substring(option[16].hex,6,9) == 'PXEClient' and substring(option[16].hex,21,5) == '00007'",
           "option-data": [
             {
               "space": "dhcp6",
               "name": "bootfile-url",
               "code": 59,
               "data": "tftp://[fd33::2]/uefi/BOOT/BOOTX64.EFI"
             }
           ]
         },
         {
           "name": "bios PXE Clients",
           "test": "substring(option[16].hex,6,9) == 'PXEClient' and substring(option[16].hex,21,5) == '00000'",
           "option-data": [
             {
               "space": "dhcp6",
               "name": "bootfile-url",
               "code": 59,
               "data": "tftp://[fd33::2]/syslinux/pxelinux.0"
             }
           ]
         },
         {
           "name": "uefi HTTP Clients",
           "test": "substring(option[16].hex,6,10) == 'HTTPClient' and substring(option[16].hex,22,5) == '00007'",
           "option-data": [
             {
               "space": "dhcp6",
               "name": "bootfile-url",
               "code": 59,
               "data": "http://[fd33::2]/uefi/BOOT/BOOTX64.EFI"
             }
           ]
         }
       ]
     }
   }

3. Start the DHCPv6 service:

   # systemctl enable --now kea-dhcp6

4. If DHCPv6 packets are dropped by the RP filter in the firewall, check its log. If the log contains the rpfilter_DROP entry, disable the filter using the following configuration in the /etc/firewalld/firewalld.conf file:

   IPv6_rpfilter=no