[CentOS] A workaround to dhclient problems

Stephen Harris lists at spuddy.org
Tue Feb 12 14:06:10 UTC 2013


Summary: if you have C5 guests with dhclient "bad udp checksum" issues
then this entry on the host will fix it:

iptables -A POSTROUTING -t mangle -p udp --dport bootpc -j CHECKSUM --checksum-fill

Detail:

If anyone else is seeing this...

Feb 11 19:22:11 mercury dhclient: DHCPREQUEST on eth0 to 255.255.255.255 port 67 (xid=0x63be132a)
Feb 11 19:22:56 mercury last message repeated 3 times
Feb 11 19:23:12 mercury dhclient: DHCPREQUEST on eth0 to 255.255.255.255 port 67 (xid=0x63be132a)
Feb 11 19:23:12 mercury dhclient: 5 bad udp checksums in 5 packets
Feb 11 19:23:20 mercury dhclient: DHCPREQUEST on eth0 to 255.255.255.255 port 67 (xid=0x63be132a)
Feb 11 19:23:51 mercury last message repeated 2 times
Feb 11 19:24:09 mercury last message repeated 2 times
Feb 11 19:24:09 mercury dhclient: 5 bad udp checksums in 5 packets

The client eventually expires the lease and goes back to DISCOVER state
and then gets an IP address.

This only seems to happen with C5 (RH5?) guests on a KVM host.  C6 guests
don't have the problem.  Googling also shows Debian with issues, and
the problem may be in the ISC code base.

The work-around is to add an iptables entry on the host:

iptables -A POSTROUTING -t mangle -p udp --dport bootpc -j CHECKSUM --checksum-fill

With this in place dhclient on C5 guests can happily renew their address

Feb 12 00:02:02 mercury dhclient: DHCPREQUEST on eth0 to 10.0.0.134 port 67 (xid=0x63be132a)
Feb 12 00:02:02 mercury dhclient: DHCPACK from 10.0.0.134 (xid=0x63be132a)
Feb 12 00:02:02 mercury dhclient: bound to 10.0.0.135 -- renewal in 16918 seconds.
Feb 12 04:44:00 mercury dhclient: DHCPREQUEST on eth0 to 10.0.0.134 port 67 (xid=0x63be132a)
Feb 12 04:44:00 mercury dhclient: DHCPACK from 10.0.0.134 (xid=0x63be132a)
Feb 12 04:44:00 mercury dhclient: bound to 10.0.0.135 -- renewal in 18447 seconds.

-- 

rgds
Stephen


More information about the CentOS mailing list