Configuring a FreeBSD "Kickstart" server
                        by Steven St.Laurent  - steven@403forbidden.net


Intro

Ducks
Ingredients
Security
Contributing

Files
Distro
Files
Files
Mfsroot
Patch
PXEBoot
Boot
Kernel

Services
INETD
DHCP
TFTP
NFS
FTP

Details
How it works
Loader.rc

Installing

Finishing


	DHCP

	DHCP is a requirement for PXE. While DHCP does not offer the last word
	in security it is at least offers some features to help your keep your
	system secure. Hard code specific MAC addresses to specific IP's if you
	wish but a isolated network is better.

	I installed isc-dhcp3 from the ports tree (/usr/ports/net) and did a very
	basic configuration of it. I do not use dhcp on my local network for various
	reasons, the biggest being security (see above). 

	My simple config looks like this

		  ddns-update-style none;
		  option broadcast-address 192.168.1.255;
		  option domain-name "mydomain.com";
		  option domain-name-servers 192.168.1.5;
		  option routers 192.168.1.1;
		  server-name "My DHCP Server";
		  server-identifier 192.168.1.2;
		  next-server 192.168.1.2;
		  default-lease-time 600;
		  max-lease-time 7200;
		  authoritative;
		  log-facility local7;
		  subnet 192.168.1.0 netmask 255.255.255.0 { 
                        range 192.168.1.100 192.168.1.110;
                        option root-path "/opt/export/tftpboot";
                        filename "pxeboot"; }

	the option root-path is necessary for NFS remote booting. If
	you are using TFTP can remove this option.

	In this configuration I have 3 servers, 192.168.1.1 is my
	network gateway/firewall, 192.168.1.2 is the DHCP server and
	192.168.1.5 is my DNS server. These can all be on the same IP 
	if you wish. 



Copyright © 2003 - Steven St.Laurent - steven@403forbidden.net