summaryrefslogtreecommitdiff
path: root/usr.sbin/dhcpd/dhcpd.8
diff options
context:
space:
mode:
authorChris Kuethe <ckuethe@cvs.openbsd.org>2006-06-14 14:58:53 +0000
committerChris Kuethe <ckuethe@cvs.openbsd.org>2006-06-14 14:58:53 +0000
commit0edc08d91552b11f7caa2191b759b475bf31297c (patch)
tree0cb96e5eec6787f047319e7f136c93e6eaacc2d9 /usr.sbin/dhcpd/dhcpd.8
parent5a9b4670b341057df3e36cb54a9dd228dfb75da5 (diff)
This diff allows dhcpd to put active leases into a pf table. Dhcpd will then
periodically - based on the length of the shortest lease time - walk across all leases searching for expired leases which are then removed from the pf table. ok henning
Diffstat (limited to 'usr.sbin/dhcpd/dhcpd.8')
-rw-r--r--usr.sbin/dhcpd/dhcpd.814
1 files changed, 13 insertions, 1 deletions
diff --git a/usr.sbin/dhcpd/dhcpd.8 b/usr.sbin/dhcpd/dhcpd.8
index d5abc76049a..9da7203e6e3 100644
--- a/usr.sbin/dhcpd/dhcpd.8
+++ b/usr.sbin/dhcpd/dhcpd.8
@@ -1,4 +1,4 @@
-.\" $OpenBSD: dhcpd.8,v 1.10 2006/05/31 09:05:42 jmc Exp $
+.\" $OpenBSD: dhcpd.8,v 1.11 2006/06/14 14:58:51 ckuethe Exp $
.\"
.\" Copyright (c) 1995, 1996 The Internet Software Consortium.
.\" All rights reserved.
@@ -48,6 +48,7 @@
.Op Fl dfn
.Op Fl A Ar abandoned_ip_table
.Op Fl C Ar changed_ip_table
+.Op Fl L Ar leased_ip_table
.Op Fl c Ar config-file
.Op Fl l Ar lease-file
.Op Fl p Ar pf-device
@@ -178,6 +179,17 @@ When the address is leased to a different machine,
.Nm
can remove the address from the overload table, thus allowing a well-behaved
machine to reuse the address.
+.It Fl L Ar leased_ip_table
+When an address is leased
+.Nm
+will insert it into the
+.Xr pf 4
+table named
+.Ar leased_ip_table .
+Addresses are removed from the table when the lease expires.
+Combined with the table of abandoned addresses, this can help enforce a
+requirement to use DHCP on a network, or can place DHCP users in a different
+class of service.
Users are cautioned against placing much trust in Ethernet or IP addresses;
.Xr ifconfig 8
can be used to trivially change the interface's address, and on a busy DHCP