DHCP Attribute 119

Jan 04, 2006 6 Replies

Howdy folks,



We are moving from a legacy LDAP domain into a fun new Active Directory forest with all these new domains. Funny thing is, the Microsoft DHCP service has no provisions for searching multiple DNS suffixes, which they recommend as a best practice. Loving this!



Anyway, I thought that I would look into Cisco's DHCP service. Looks like there is a provision on attribute 119. Here's a snip from RFC3397:


*************************************************
  1. Example

Below is an example encoding of a search list consisting of "eng.apple.com." and "marketing.apple.com.":



+---+---+---+---+---+---+---+---+---+---+---+ |119| 9 | 3 |'e'|'n'|'g'| 5 |'a'|'p'|'p'|'l'| +---+---+---+---+---+---+---+---+---+---+---+
+---+---+---+---+---+---+---+---+---+---+---+ |119| 9 |'e'| 3 |'c'|'o'|'m'| 0 | 9 |'m'|'a'| +---+---+---+---+---+---+---+---+---+---+---+
+---+---+---+---+---+---+---+---+---+---+---+ |119| 9 |'r'|'k'|'e'|'t'|'i'|'n'|'g'|xC0|x04| +---+---+---+---+---+---+---+---+---+---+---+

Note:



i. The encoding has been split (for this example) into three Domain Search Options. All Domain Search Options are logically concatenated into one block of data before being interpreted by the client.



ii. The encoding of "eng.apple.com." ends with a zero, the null root label, to mark the end of the name, as required by RFC 1035.



*************************************************

So, my question is: How would I add this to my DHCP scope? I create the pool and see there is an "options" function from which I can choose option 119. Has anyone got this to work correctly?


Hi Wil,

Yeah, you should be able to enter (almost) any arbitrary DHCP option into your IOS DHCP server config using the "option" command ... something like ...

tucson-ajax(dhcp-config)#option 119 hex 0903[ ... ]c004

substitute the hex for you domain suffixes (null-separated) for the brackets.

The example you quote below has three instances of option 119. You probably wouldn't need to do things this way, but I suppose you could if you wanted, using the "instance" keyword.

As to whether this is going to WORK for your DHCP clients ... I have no idea.

Have fun,

Aaron

I think I'm going to try the following:

ip dhcp pool somePool domain-name domain1.com option 119 instance 1 ascii "domain2.com" option 119 instance 2 ascii "domain3.com"

Seems reasonable... I'll let ya'll know!

Wil my 3¢

~ I think I'm going to try the following: ~ ~ ip dhcp pool somePool ~ domain-name domain1.com ~ option 119 instance 1 ascii "domain2.com" ~ option 119 instance 2 ascii "domain3.com" ~ ~ Seems reasonable... I'll let ya'll know! ~ ~ Wil ~ my 3¢

I don't think THAT's going to work, since (per the RFC excerpt you posted), it looks like the value of this option has to begin with 0x0903 and end in 0xc004. But let us know how it goes.

Aaron

FYI: I could not get the bugger to work so I opened a TAC case, here is the reply:

"As per our conversation and your request, I wanted to confirm that Microsoft Windows systems have not implemented this feature yet. I have verified this with a colleague at Microsoft."

Basically, the server can give the information but only if the client requests it. M$ implementation does not request it so the server never sends it. Now the question is, why the heck would Microsoft put this in their "Best Practices" and not make any provisions for it?

Wil my 3¢

~ FYI: I could not get the bugger to work so I opened a TAC case, here is ~ the reply: ~ ~ "As per our conversation and your request, I wanted to confirm that ~ Microsoft Windows systems have not implemented this feature yet. I have ~ verified this with a colleague at Microsoft." ~ ~ Basically, the server can give the information but only if the client ~ requests it. M$ implementation does not request it so the server never ~ sends it. Now the question is, why the heck would Microsoft put this in ~ their "Best Practices" and not make any provisions for it? ~ ~ Wil ~ my 3¢

Heh ... well, thanks for following up.

Without Cisco tech support, how would anyone get their Microsoft questions answered?

Cheers,

Aaron

Aaron Leonard wrote: > Heh ... well, thanks for following up. >

Sad but true

Wil my 3¢

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required