dhcrelay

[tradigan at newrevolutions.net]

Not sure if this is the right place for this, but I have a set of FreeBSD
6.2 firewalls.  They each have 3 interfaces in them.  One interface
connects to the 10.94/16 network, the other connects the 192.168.4/24,
192.168.5/24 and 192.168.8/24 networks.

Here is a breakdown of the interfaces:

BSD 1
bge0 10.94.2.222/16
xl0 "up"
xl1 "up"
vlan2 192.168.4.2/24
vlan3 192.168.5.2/24
vlan4 192.168.8.2/24
carp1 10.94.2.221/16
carp2 192.168.4.1/24
carp3 192.168.5.1/24
carp4 192.168.8.1/24

BSD 2
bge0 10.94.2.223/16
xl0 "up"
xl1 "up"
vlan2 192.168.4.3/24
vlan3 192.168.5.3/24
vlan4 192.168.8.3/24
carp1 10.94.2.221/16
carp2 192.168.4.1/24
carp3 192.168.5.1/24
carp4 192.168.8.1/24

BSD 1 is the current CARP master for all interfaces.  For dhcrelay in
rc.conf I have:
dhcrelay_enable="YES"
dhcrelay_servers="10.94.2.204" # IP to MS Server 2003 DHCP server
dhcrelay_ifaces="bge0 vlan2 vlan3 vlan4"
dhcrelay_flags="-a"

In MS Server 2003 there is a superscope defined with scopes for each
network (10.94/16, 192.168.4., 192.168.5., and 192.168.8.)

The problem is, it doesn't seem like the BSD box is forwarding the DHCP
requests to the DHCP server.  It will NOT get an address.  If I manually
assign an IP address, the client talks fine to the other networks.

There are no firewall/nat rules loaded at all.. PF is running but without
a rule set it defaults to allow all.. any ideas?