DHCP is not working for custom/virtual mac addresses

99 views
Skip to first unread message

Nick Kakouros

unread,
Jun 18, 2017, 12:20:11 PM6/18/17
to gce-discussion

I am trying to setup honeyd on GCE. I have a vpn server running at 10.132.0.4 and I have installed honeyd on 10.132.0.5. I have configured honeyd with a single honeypot that is supposed to use DHCP to get an IP. I have given it a mac address that is the mac address of 10.132.0.5 plus 1. However, no reply/offer gets sent from the DHCP server, although requests are sent (confirmed with tcpdump).

I tried to assign the ip 10.132.0.100 to the honeypot, but then there is no route configured in the network to get from eg the vpn server to the honeypot. I tried adding one but I could not because it would be "shadowing" the local route.

So, my questions:
Is the DHCP server replying only for mac addresses of actual interfaces? How can I make honeyd work?

Irina (Google Cloud Support)

unread,
Jun 19, 2017, 3:57:05 PM6/19/17
to gce-discussion
It seems that your questions are more related to Honeyd configuration. I suggest going through Honeyd FAQ and common problems during initial Honeyd configuration that might help you.
 
With that said, in order to get further assistance I would recommend posting these questions on serverfault.com rather than a discussion post. This isn't the right place to look for 1-on-1 support, though, being a forum meant for general discussion of the platform. Make sure to include all relevant details that would help somebody debug. You can also use 'google-compute-engine' and 'google-cloud-platform' tags with your question on serverfault.

Nick Kakouros

unread,
Feb 10, 2018, 8:02:01 AM2/10/18
to gce-discussion
Just for the record, it seems GCE's dhcp server responds only for mac addresses it already knows. You cannot for instance perform arp spoofing. So, honeyd will not work there. You have to assign addresses statically in honeyd's configuration.
Reply all
Reply to author
Forward
0 new messages