DHCP server does not assign IP addresses SG500 firmware 1.3.5

[andbor600]

good day collegues

has any of you come across the following issue:

my switch (after upgrading to the newest firmware 1.3.5) does not assign IP addresses to some of the hosts.

after a couple of hours I managed (do not even how) to force my switch to assign IP addresses only to some of the hosts.

still some of them cannot get the IP address and remain with "funny" IP address like i.e. 169.254.100.100

additional info

1. if I boot my switch with the previous version of firmware (1.3.0.6) everything is OK. all my hosts get correct IP addresess

2. the hosts which do not get IP address were perviously entered in stat host table - now removed, ARP cleared, etc, everything many many times rebooted.

I ran out of ideas, could you pleae give me some hints ?

the config below:

config-file-header
SG500
v1.3.5.58 / R750_NIK_1_35_647_358
CLI v1.0
set system mode router queues-mode 4

file SSD indicator encrypted
@
ssd-control-start
ssd config
ssd file passphrase control unrestricted
no ssd file integrity control
ssd-control-end zzz
!
no spanning-tree
vlan database
vlan 11,13-14
exit
voice vlan oui-table add 0001e3 Siemens_AG_phone________
voice vlan oui-table add 00036b Cisco_phone_____________
voice vlan oui-table add 00096e Avaya___________________
voice vlan oui-table add 000fe2 H3C_Aolynk______________
voice vlan oui-table add 0060b9 Philips_and_NEC_AG_phone
voice vlan oui-table add 00d01e Pingtel_phone___________
voice vlan oui-table add 00e075 Polycom/Veritel_phone___
voice vlan oui-table add 00e0bb 3Com_phone______________
no ip dhcp snooping verify
ip dhcp snooping information option allowed-untrusted
ip dhcp snooping vlan 11
ip dhcp snooping vlan 13
ip dhcp snooping vlan 14
ip arp inspection logging interval infinite
green-ethernet energy-detect
no eee enable
arp timeout 1
ip dhcp server
ip dhcp pool host q409
address 10.10.11.2 255.255.255.0 client-identifier 01:00:08:9b:ac:8f:92
default-router 10.10.11.254
dns-server 10.10.10.1
exit
ip dhcp pool host PCH-100
address 10.10.11.10 255.255.255.0 client-identifier 01:00:06:dc:41:ef:ef
default-router 10.10.11.254
dns-server 10.10.10.1
exit
ip dhcp pool host q209
address 10.10.13.3 255.255.255.0 client-identifier 01:00:08:9b:ac:72:ba
client-name q209
default-router 10.10.13.254
dns-server 8.8.8.8
exit
exit
ip dhcp pool network HOME
address low 10.10.11.1 high 10.10.11.254 255.255.255.0
lease infinite
default-router 10.10.11.254
dns-server 10.10.10.1
exit
ip dhcp pool network GUESTS
address low 10.10.14.1 high 10.10.14.254 255.255.255.0
lease infinite
netbios-node-type b-node
default-router 10.10.14.254
dns-server 10.10.10.1 62.233.233.233
exit
ip dhcp relay address 10.10.10.1
ip dhcp relay address 10.10.11.254
ip dhcp relay address 10.10.13.254
ip dhcp relay address 10.10.14.254
no boot host auto-config
no qos
qos advanced-mode trust dscp
qos wrr-queue wrtd
exit
hostname SG500
line telnet
exec-timeout 0
exit
logging buffered debugging
no logging file
aaa authentication login Telnet local
aaa authentication enable Telnet enable
aaa authentication dot1x default none
line telnet
login authentication Telnet
enable authentication Telnet
password 999 encrypted
exit
no passwords complexity enable
passwords aging 0
username 999 password encrypted 999 privilege 15
ip http timeout-policy 0 http-only
clock timezone " " 1
clock summer-time web recurring eu
clock source sntp
clock source browser
sntp unicast client enable
clock dhcp timezone
ip domain name 999
ip name-server  10.10.10.1 62.233.233.233 8.8.8.8
ip host 999 10.10.13.3
ip telnet server
no service mirror-configuration
no security-suite deny syn-fin
security-suite syn protection mode disabled
!
interface vlan 1
ip address 10.10.10.254 255.255.255.0
no ip address dhcp
!
interface vlan 11
name HOME
ip address 10.10.11.254 255.255.255.0
ip dhcp relay enable
!
interface vlan 13
name DMZ
ip address 10.10.13.254 255.255.255.0
ip dhcp relay enable
!
interface vlan 14
name GUESTS
ip address 10.10.14.254 255.255.255.0
ip dhcp relay enable
!
interface gigabitethernet1/10
description "(99) QNAP 409"
switchport trunk native vlan 11
!
exit
macro auto disabled
macro auto processing type host enabled
macro auto processing type ip_phone disabled
macro auto processing type ip_phone_desktop disabled
macro auto processing type router enabled
mac address-table aging-time 10
ip default-gateway 10.10.10.1
snmp-server set  999 permit

[mpyhala]

andbor600,

When you upgraded the firmware, did you also upgrade the included boot code via tftp?

- Marty

[andbor600]

at first I had upgraded the firmware,later on I upgraded boot loader.

now I have got this:

SG500#sh ver
SW version    1.3.5.58 ( date  10-Oct-2013 time  17:17:15 )
Boot version    1.3.5.06 ( date  21-Jul-2013 time  15:12:21 )
HW version    V01
SG500#

[mpyhala]

andbor600,

Since it worked fine with the older firmware, I wonder if your config is corrupt. I would back up the startup config, reboot to factory defaults and reconfigure the DHCP settings. If it works properly, finish the rest of the configuration. If not, reload the startup config and open a case with support:

cisco.com/go/sbsc

- Marty

[andbor600]

reboot to factory setting ....that was also my guess

so I created the startup file from scratch. it did not help. some of my devices do not get IP addresess.

some of them are quite old. manufactered in 2008 (QNAP NAS). as I can see there are some new DHCP options in the newest firmware... maybe I need to add some DHCP options ?

[mpyhala]

Does the QNAP communicate with the switch if you give it a static IP?

- Marty

[andbor600]

yes, sure.

QNAPs communicate well with assigned static IP addresses.

[Tom Watts]

Hi Andbor, on your config I do not know why you're using DHCP relay for each subnet while you have a DHCP pool created for each VLAN on the switch. I also do not see your trust listed for the ARP inspection.

-Tom
Please mark answered for helpful posts

[andbor600]

Tom, thanks for your hints. I removed DHCP relaylines from my config. could you please be more specific with " the trust" ?

[andbor600]

good day guys, any other hints ? I changed the config ccroding to Tom's directions. still no progress...

[andbor600]

or other question to you: how can I trace the DHCP commands generated by DHCP server ? since the error log I am aware should not be called error log :-)

[Tom Watts]

Hi Andbor, please make a backup config of your file, factory reset the switch.

After this, manually configure a DHCP scope without any other configuration.

Just something simple like this

ip dhcp pool network GUESTS

address low 10.10.14.1 high 10.10.14.254 255.255.255.0

lease infinite

netbios-node-type b-node

default-router 10.10.14.254

dns-server 10.10.10.1 62.233.233.233

Verify your machine receive IP address with no other configuration.

In some ways, I'm afraid some of your connections black listed due to the arp inspection.

-Tom
Please mark answered for helpful posts

[andbor600]

Tom,

no luck.

I simplified the config file according to your instructions.

only entries from the post above. nothing more. it does not work

any other suggestions ?

what are the DHCP options intrduced in 1.3.5 firmware ?  maybe this would help ?

[Tom Watts]

Andbor, all DHCP options are available on 1.3.5, if it is not native support to the switch, it supports only HEX option.

What exactly is the device you're trying to give DHCP to? What model product and network adapter?

-Tom
Please mark answered for helpful posts

[andbor600]

the devices wich cannot get IP addresses are:

QNAP-209 and QNAP-409.

unfortunaltey I do not know the manufacter of the network cards.I do have the same problem with my IP camera (Acti E72). it does not get an IP address.

now, other linux devices work fine (popcorn, TV satellite tuners, etc). PCs with window operating system work fine as well