by Steven St.Laurent - steven@403forbidden.net
|
Intro Ducks Ingredients Security Contributing Files Distro Files Files Mfsroot Patch PXEBoot Boot Kernel Services INETD DHCP TFTP NFS FTP Details How it works Loader.rc Installing Finishing |
DHCP
DHCP is a requirement for PXE. While DHCP does not offer the last word
in security it is at least offers some features to help your keep your
system secure. Hard code specific MAC addresses to specific IP's if you
wish but a isolated network is better.
I installed isc-dhcp3 from the ports tree (/usr/ports/net) and did a very
basic configuration of it. I do not use dhcp on my local network for various
reasons, the biggest being security (see above).
My simple config looks like this
ddns-update-style none;
option broadcast-address 192.168.1.255;
option domain-name "mydomain.com";
option domain-name-servers 192.168.1.5;
option routers 192.168.1.1;
server-name "My DHCP Server";
server-identifier 192.168.1.2;
next-server 192.168.1.2;
default-lease-time 600;
max-lease-time 7200;
authoritative;
log-facility local7;
subnet 192.168.1.0 netmask 255.255.255.0 {
range 192.168.1.100 192.168.1.110;
option root-path "/opt/export/tftpboot";
filename "pxeboot"; }
the option root-path is necessary for NFS remote booting. If
you are using TFTP can remove this option.
In this configuration I have 3 servers, 192.168.1.1 is my
network gateway/firewall, 192.168.1.2 is the DHCP server and
192.168.1.5 is my DNS server. These can all be on the same IP
if you wish.
|