7.3. 为网络引导配置 DHCPv6 服务器

流程

1. 安装 DHCP 服务器：

   # dnf install kea

   Copy to Clipboard Toggle word wrap

2. 设置 DHCPv6 服务器。在 /etc/kea/kea-dhcp6.conf 文件中输入以下配置。替换地址以匹配您的网卡。

   {
     "Dhcp6": {
       "interfaces-config": {
         "interfaces": [ "enp1s0" ]
       },
       "subnet6": [
         {
           "id": 1,
           "subnet": "fd33::/64",
           "interface": "enp1s0",
           "pools": [
             {
               "pool": "fd33::100-fd33::200"
             }
           ]
         }
       ],
       "client-classes": [
         {
           "name": "uefi PXE Clients",
           "test": "substring(option[16].hex,6,9) == 'PXEClient' and substring(option[16].hex,21,5) == '00007'",
           "option-data": [
             {
               "space": "dhcp6",
               "name": "bootfile-url",
               "code": 59,
               "data": "tftp://[fd33::2]/uefi/BOOT/BOOTX64.EFI"
             }
           ]
         },
         {
           "name": "bios PXE Clients",
           "test": "substring(option[16].hex,6,9) == 'PXEClient' and substring(option[16].hex,21,5) == '00000'",
           "option-data": [
             {
               "space": "dhcp6",
               "name": "bootfile-url",
               "code": 59,
               "data": "tftp://[fd33::2]/syslinux/pxelinux.0"
             }
           ]
         },
         {
           "name": "uefi HTTP Clients",
           "test": "substring(option[16].hex,6,10) == 'HTTPClient' and substring(option[16].hex,22,5) == '00007'",
           "option-data": [
             {
               "space": "dhcp6",
               "name": "bootfile-url",
               "code": 59,
               "data": "http://[fd33::2]/uefi/BOOT/BOOTX64.EFI"
             }
           ]
         }
       ]
     }
   }

   Copy to Clipboard Toggle word wrap

3. 启动 DHCPv6 服务：

   # systemctl enable --now kea-dhcp6

   Copy to Clipboard Toggle word wrap

4. 如果 DHCPv6 数据包被防火墙中的 RP 过滤器丢弃了，请检查其日志。如果日志包含 rpfilter_DROP 条目，请使用 /etc/firewalld/firewalld.conf 文件中的以下配置禁用过滤器：

   IPv6_rpfilter=no

   Copy to Clipboard Toggle word wrap