<?xml version="1.0" encoding="utf-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Distributing Static Routes with DHCP</title>
	<atom:link href="http://ignore.tv/2009/07/17/distributing-static-routes-with-dhcp/feed/" rel="self" type="application/rss+xml" />
	<link>http://ignore.tv/2009/07/17/distributing-static-routes-with-dhcp/</link>
	<description>Living Without Privacy</description>
	<lastBuildDate>Sun, 15 Jan 2012 05:31:49 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
	<item>
		<title>By: James Cape</title>
		<link>http://ignore.tv/2009/07/17/distributing-static-routes-with-dhcp/comment-page-1/#comment-178921</link>
		<dc:creator>James Cape</dc:creator>
		<pubDate>Mon, 03 Oct 2011 22:47:49 +0000</pubDate>
		<guid isPermaLink="false">http://ignore-your.tv/?p=728#comment-178921</guid>
		<description>@Ben,

Assuming the code is still enabled* and the kernel(s) in question haven&#039;t been patched, it should exhibit the same behavior---but it&#039;s definitely worth watching it with a sniffer.

* According to some old howtos, there is a kconfig option to enable/disable multicast, I dunno if that&#039;s been removed or not.</description>
		<content:encoded><![CDATA[<p>@Ben,</p>
<p>Assuming the code is still enabled* and the kernel(s) in question haven’t been patched, it should exhibit the same behavior—but it’s definitely worth watching it with a sniffer.</p>
<p>* According to some old howtos, there is a kconfig option to enable/disable multicast, I dunno if that’s been removed or not.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Ben</title>
		<link>http://ignore.tv/2009/07/17/distributing-static-routes-with-dhcp/comment-page-1/#comment-178920</link>
		<dc:creator>Ben</dc:creator>
		<pubDate>Mon, 03 Oct 2011 18:58:51 +0000</pubDate>
		<guid isPermaLink="false">http://ignore-your.tv/?p=728#comment-178920</guid>
		<description>So sounds like I really just need to verify the behavior of my devices when configuring the static routes. In this case they are xDSL modems running some flavor of Linux, but I would guess that the behavior will be as you describe there as well.</description>
		<content:encoded><![CDATA[<p>So sounds like I really just need to verify the behavior of my devices when configuring the static routes. In this case they are xDSL modems running some flavor of Linux, but I would guess that the behavior will be as you describe there as well.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: James Cape</title>
		<link>http://ignore.tv/2009/07/17/distributing-static-routes-with-dhcp/comment-page-1/#comment-178903</link>
		<dc:creator>James Cape</dc:creator>
		<pubDate>Thu, 29 Sep 2011 20:43:28 +0000</pubDate>
		<guid isPermaLink="false">http://ignore-your.tv/?p=728#comment-178903</guid>
		<description>@Ben,

Unfortunately I don&#039;t have a reference for it other than the fact that all the multicast route examples online don&#039;t set a next-hop address, just the interface.

I did just re-confirm that it still fails with my laptop here on em1/eth0 vs. wlan0. Em1 is the default interface (wired), and I added a route to 224/4 via &lt;gwaddr&gt; dev wlan0---it still fails.

Quit the app, delete the route and re-add with 224/4 dev wlan0 (no via), restart the app, it works fine.

Fired up wireshark, and Linux is doing what I remembered it doing since RHEL5 (at least): firing the IGMP join at the group IP address, but the gateway&#039;s MAC address. My &lt;em&gt;guess&lt;/em&gt; is that IGMP snooping on the switch (which is enabled by default on Catalysts) is watching on the MAC layer and not the IP layer. Since my join is not on the right Ethernet address at all, it won&#039;t get caught by the snooper process and my port would not be added to the switch&#039;s MFIB (in this scenario it&#039;s AP1200 -&gt; 2960 -&gt; 3750 SVI, but the theory holds regardless).

If you don&#039;t specify a gateway address, then Linux does the standard thing and bitshifts the group address to derive the multicast MAC.</description>
		<content:encoded><![CDATA[<p>@Ben,</p>
<p>Unfortunately I don’t have a reference for it other than the fact that all the multicast route examples online don’t set a next-hop address, just the interface.</p>
<p>I did just re-confirm that it still fails with my laptop here on em1/eth0 vs. wlan0. Em1 is the default interface (wired), and I added a route to 224/4 via &lt;gwaddr&gt; dev wlan0—it still fails.</p>
<p>Quit the app, delete the route and re-add with 224/4 dev wlan0 (no via), restart the app, it works fine.</p>
<p>Fired up wireshark, and Linux is doing what I remembered it doing since RHEL5 (at least): firing the IGMP join at the group IP address, but the gateway’s MAC address. My <em>guess</em> is that IGMP snooping on the switch (which is enabled by default on Catalysts) is watching on the MAC layer and not the IP layer. Since my join is not on the right Ethernet address at all, it won’t get caught by the snooper process and my port would not be added to the switch’s MFIB (in this scenario it’s AP1200 -&gt; 2960 -&gt; 3750 SVI, but the theory holds regardless).</p>
<p>If you don’t specify a gateway address, then Linux does the standard thing and bitshifts the group address to derive the multicast MAC.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Ben</title>
		<link>http://ignore.tv/2009/07/17/distributing-static-routes-with-dhcp/comment-page-1/#comment-178901</link>
		<dc:creator>Ben</dc:creator>
		<pubDate>Thu, 29 Sep 2011 16:11:23 +0000</pubDate>
		<guid isPermaLink="false">http://ignore-your.tv/?p=728#comment-178901</guid>
		<description>I&#039;ve been looking for more info on issues with Cisco and setting the next hop address for multicast addresses but have been unable to track it down. Do you potentially have some links or a let me google that for you smack in the face?</description>
		<content:encoded><![CDATA[<p>I’ve been looking for more info on issues with Cisco and setting the next hop address for multicast addresses but have been unable to track it down. Do you potentially have some links or a let me google that for you smack in the face?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jim Snyder</title>
		<link>http://ignore.tv/2009/07/17/distributing-static-routes-with-dhcp/comment-page-1/#comment-178370</link>
		<dc:creator>Jim Snyder</dc:creator>
		<pubDate>Tue, 21 Sep 2010 13:28:55 +0000</pubDate>
		<guid isPermaLink="false">http://ignore-your.tv/?p=728#comment-178370</guid>
		<description>Incidentally, /etc/sysconfig/network-scripts/ifup-post checks for /sbin/ifup-local for (one presumes) site-specific post-&quot;up&quot; local customizations.

It doesn&#039;t exist, but one could always roll one&#039;s own in the same way that one rolls /etc/...dhclient-*-hooks.

And in /sbin/ifup, there&#039;s a similarly futile reference to /sbin/ifup-pre-local.

Probably just me, but I&#039;d rather have site-specific scripts in /etc/sysconfig/network-scripts, or at least *not* /sbin.</description>
		<content:encoded><![CDATA[<p>Incidentally, /etc/sysconfig/network-scripts/ifup-post checks for /sbin/ifup-local for (one presumes) site-specific post-“up” local customizations.</p>
<p>It doesn’t exist, but one could always roll one’s own in the same way that one rolls /etc/…dhclient-*-hooks.</p>
<p>And in /sbin/ifup, there’s a similarly futile reference to /sbin/ifup-pre-local.</p>
<p>Probably just me, but I’d rather have site-specific scripts in /etc/sysconfig/network-scripts, or at least *not* /sbin.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jim Snyder</title>
		<link>http://ignore.tv/2009/07/17/distributing-static-routes-with-dhcp/comment-page-1/#comment-178369</link>
		<dc:creator>Jim Snyder</dc:creator>
		<pubDate>Tue, 21 Sep 2010 00:57:59 +0000</pubDate>
		<guid isPermaLink="false">http://ignore-your.tv/?p=728#comment-178369</guid>
		<description>Looks like dhclient-(enter&#124;exit)-hooks moved to /etc/dhcp in FC13.

I run my firewall from /etc/dhclient-*-hooks.

Imagine my surprise.

I gather this change originates in ISC&#039;s new dhcp release:

http://www.mail-archive.com/debian-bugs-rc@lists.debian.org/msg225247.html

I haven&#039;t looked closely, but I think this bug report is relevant to your post:

https://bugzilla.redhat.com/show_bug.cgi?id=516325</description>
		<content:encoded><![CDATA[<p>Looks like dhclient-(enter|exit)-hooks moved to /etc/dhcp in FC13.</p>
<p>I run my firewall from /etc/dhclient-*-hooks.</p>
<p>Imagine my surprise.</p>
<p>I gather this change originates in ISC’s new dhcp release:</p>
<p><a href="http://www.mail-archive.com/debian-bugs-rc@lists.debian.org/msg225247.html" rel="nofollow">http://www.mail-archive.com/debian-bugs-rc@lists.debian.org/msg225247.html</a></p>
<p>I haven’t looked closely, but I think this bug report is relevant to your post:</p>
<p><a href="https://bugzilla.redhat.com/show_bug.cgi?id=516325" rel="nofollow">https://bugzilla.redhat.com/show_bug.cgi?id=516325</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Receiving static routes through DHCP in Fedora 12 &#171; Tusheto&#39;s Blog</title>
		<link>http://ignore.tv/2009/07/17/distributing-static-routes-with-dhcp/comment-page-1/#comment-178252</link>
		<dc:creator>Receiving static routes through DHCP in Fedora 12 &#171; Tusheto&#39;s Blog</dc:creator>
		<pubDate>Tue, 23 Feb 2010 11:50:01 +0000</pubDate>
		<guid isPermaLink="false">http://ignore-your.tv/?p=728#comment-178252</guid>
		<description>[...] file for dhclient, that will parse the DHCP option 121. I found how this could be done here on this blog. You can copy the file from there, or below [...]</description>
		<content:encoded><![CDATA[<p>[…] file for dhclient, that will parse the DHCP option 121. I found how this could be done here on this blog. You can copy the file from there, or below […]</p>
]]></content:encoded>
	</item>
</channel>
</rss>

