shodanx | 2025-01-06 07:37:32 UTC | #1

Hello,

This is in response to prematurely closed thread linked below.

https://forum.openwrt.org/t/luci-add-support-for-managing-tags-in-dhcp-and-dns-configuration-web-page/178467

In this thread a user @systemcrash
shows off his custom made "tag matching tab"  to the DHCP settings panel.

I need this ability to configure the following tags in particular

Set the ipxe tag for hosts already running iPXE as defined by their "PXE User Class"
`dhcp-userclass=set:ipxe,iPXE`

A class of devices on my network 
`dhcp-mac=set:customgateway,DE:AD:B0:0F:*:*`
These devices will be served only a fakeinternet gateway
(like this dhcp-option=tag:customgateway,option:router,192.168.1.99)

This one might not be a tag properly 
`dhcp-range=192.168.1.0,proxy,255.255.255.0`


I am not sure but I think all of the following ways can be used to set a tag to a host

```
client centric (? could be incomplete ?) these should be more straightforward to implement
--dhcp-vendorclass=set:<tag>,...	Tag based on DHCP vendor class
--dhcp-userclass=set:<tag>,...	Tag based on DHCP user class
--dhcp-mac=set:<tag>,...	Tag based on MAC address
--dhcp-circuitid=set:<tag>,...	Tag based on relay circuit ID
--dhcp-remoteid=set:<tag>,...	Tag based on relay remote ID
--dhcp-subscrid=set:<tag>,...	Tag based on subscriber ID
--dhcp-match=set:<tag>,...	Tag based on DHCP option values
--dhcp-name-match=set:<tag>,...	Tag based on DHCP client hostname
--tag-if=set:<tag>,...	Conditionally set tags based on other tags


server centric (? could be incorrect or incomplete ?)
--dhcp-host=...,set:<tag>	Tag specific hosts
--dhcp-range=set:<tag>,...	Tag based on IP range
--address=...,set:<tag>	Tag specific DNS responses
--server=...,set:<tag>	Use specific DNS server based on tag
--cname=...,set:<tag>	Apply CNAME records based on tag
--dhcp-option=tag:<tag>,...	Provide specific DHCP options to tagged clients
--dhcp-script=<script-path>	Use a custom script to set tags
```

![Screenshot 2023-11-23 at 23.11.48|690x378](upload://2IzpJhRZ7oVXfY5CmC9lQm4AxeK.png)

So this thread is to inquire what is the status of the "Match Tags" tabs

And what series of commands can add the current test version to a fresh 23.05.5 openwrt installation for testing purposes.

-------------------------

systemcrash | 2025-01-06 17:18:20 UTC | #2

See [here](https://github.com/openwrt/luci/pull/7178).

-------------------------

shodanx | 2025-01-12 11:34:33 UTC | #3

Thank you,
Is it possible to try it on 23.05.5 ?

-------------------------

systemcrash | 2025-01-12 17:50:44 UTC | #4

Sure is. Download `dhcp.js` and replace the device copy.

-------------------------

shodanx | 2025-12-27 13:53:38 UTC | #5

Hello,

I just upgraded my old 23.05 router.

I had this installed, and it worked great

But now I’m 24.10 and I want to get this functionality back

I see that the old file now lists as outdated

https://github.com/openwrt/luci/pull/7178/files#diff-90caf036d2316d858be5df6b382c44d4130a66c52cc7b6fda8ee715971a4f9bd


 I am curious what currently is the latest version and what is the url to obtain it ?

I notice it is called luci-mod-network, is there a package for it ?

thanks !

-------------------------

lleachii | 2025-12-27 20:24:45 UTC | #6

[quote="shodanx, post:5, topic:220640"]
I am curious what currently is the latest version and what is the url to obtain it ?

I notice it is called luci-mod-network, is there a package for it ?
[/quote]

@systemcrash

-------------------------

systemcrash | 2025-12-31 17:44:25 UTC | #7

It’s updated to align with snapshot and 25.12. DHCP was split into DHCP and DNS. It’s now merged into master and 25.

-------------------------

shodanx | 2025-12-31 18:24:00 UTC | #8

Thanks !

Could you provide the link to the current file ?

I will try it on my 24.10 router

-------------------------

shodanx | 2026-01-02 19:57:44 UTC | #9

I upgraded my router to 24.10.5

I also upgraded luci to the latest packages

`root@router:~# opkg list-installed | grep -E '^(luci|luci-app-firewall|luci-app-package-manager|luci-base|luci-light|luci-mod-admin-full|luci-mod-network|luci-mod-stat`
`us|luci-mod-system|luci-proto-ipv6|luci-proto-ppp|luci-ssl|luci-theme-bootstrap)'`
`luci - 25.365.52131~3ac2e08`
`luci-app-firewall - 25.365.52131~3ac2e08`
`luci-app-package-manager - 25.365.52131~3ac2e08`
`luci-base - 25.365.52131~3ac2e08`
`luci-light - 25.365.52131~3ac2e08`
`luci-mod-admin-full - 25.365.52131~3ac2e08`
`luci-mod-network - 25.365.52131~3ac2e08`
`luci-mod-status - 25.365.52131~3ac2e08`
`luci-mod-system - 25.365.52131~3ac2e08`
`luci-proto-ipv6 - 25.365.52131~3ac2e08`
`luci-proto-ppp - 25.365.52131~3ac2e08`
`luci-ssl - 25.365.52131~3ac2e08`
`luci-theme-bootstrap - 25.365.52131~3ac2e08`

Still the “Tags"  tab remains elusive

![image|690x130](upload://62ZB5W31Oj0M5d1t0iSxQxfmZmh.png)

I searched with git for all the versions of the dhcp.js file and found this long list

`git clone ``https://github.com/openwrt/luci.git`
`git fetch --all`
`git log --all -- modules/luci-mod-network/htdocs/luci-static/resources/view/network/dhcp.js`

https://pastebin.com/BDGnznv5

So I found the latest version of this file was 

commit ffa2c130f958d70e0c9bbc40629892b1568cb49e (origin/openwrt-25.12)
from Date:   Wed Dec 31 18:33:33 2025 +0100

So I tried downloading it and replacing my dhcp.js with it, but alas, the Tag tab did not appear either

```
root@router:~# wget https://raw.githubusercontent.com/openwrt/luci/ffa2c130f958d70e0c9bbc40629892b1568cb49e/module
s/luci-mod-network/htdocs/luci-static/resources/view/network/dhcp.js
Downloading 'https://raw.githubusercontent.com/openwrt/luci/ffa2c130f958d70e0c9bbc40629892b1568cb49e/modules/luci-mod-network/htdocs/luci-static/resources/view/network/dhcp.js'
dhcp.js              100% |*******************************| 38916   0:00:00 ETA
Download completed (38916 bytes)
root@router:~# find / | grep dhcp | grep js
/www/luci-static/resources/protocol/dhcp.js
root@router:~# cp /www/luci-static/resources/view/network/dhcp.js dhcp.js.bak
root@router:~# cp dhcp.js /www/luci-static/resources/view/network/dhcp.js
root@router:~#
```

-------------------------

systemcrash | 2026-01-05 00:42:28 UTC | #10

[quote="systemcrash, post:7, topic:220640"]
It’s updated to align with snapshot and 25.12.

[/quote]

It will only work on 25.12 and snapshot.

-------------------------

lleachii | 2026-01-05 06:25:00 UTC | #11

If you (or anyone) has an opportunity, can you show a screenshot of where this is located, or a breadcrumb pseudo navigation to the LuCI page/tab?

[quote="systemcrash, post:10, topic:220640"]
will only work on 25.12 and snapshot.
[/quote]

I've been having difficulty locating it.

-------------------------

shodanx | 2026-01-05 16:35:52 UTC | #12

Hi,

I have updated all luci packages to 25.365.52131\~3ac2e08

![image|411x500](upload://jMqIRxZ3J5gv6FD3jtw4g8wLGxX.png)

But oopsies, this broke my router !

So for the first time I tried the snapshot firmware

I got this file

https://downloads.openwrt.org/releases/24.10.5/targets/ramips/mt7621/openwrt-24.10.5-ramips-mt7621-netgear_wax202-squashfs-sysupgrade.bin

upgrade and wiped settings

And I could not ping 192.168.1.1

I waited a long time, rebooted the rooter many times.

Uh oh ! Bricked by router ?

I have a spare wax202 connected it in its place, back online.

I brought the snapshot flashed router to my computer, connected the router directly into my network port, set manual ip address in my computer to 192.168.1.2,  still no ping from 192.168.1.1

Waited around 1 hour, rebooted the router a few times, I had ping -t 192.168.1.1 running the whole time… Really started to feel like a bricked router.

Then the router started responding to pings to 192.168.1.1 !

ssh’d into it, it’s not safemode, it’s working, fine ?

Try to access luci ? 

(depicted, a new snapshot user figuring it out)

![2026-01-05_11h21s07_2169x8064|134x500](upload://bou6kQy6RpoyNEhETn6EWnk3mOF.jpeg)

Not working, long story short, luci’s not installed

I ran

`apk update`
`apk add luci`
`apk add luci-ssl`
`/etc/init.d/uhttpd restart`

Ran my setup script

Plugged the router in the right place, internet works and 

![image|556x500](upload://or1RCOeOWYCjsr7BJ9jwiioFqE5.png)

yay, back in business !

@lleachii 

To answer your question, here is the tags tab

![image|181x500](upload://2nNT9G4rhW6in5y5Ho9v2tzLOkD.jpeg)

-------------------------

lleachii | 2026-01-05 16:57:08 UTC | #13

* Your post seems to imply the tab was missing because you failed to install LuCI on a SNAPSHOT (it was difficult to follow the rationale of your arrows)  

[quote="shodanx, post:12, topic:220640"]
yay, back in business !
[/quote]

* I'm still unable to locate the tab in 25.12.0-rc1 - so I'm not sure how you resolved the issue

![image|690x171](upload://19urQXe6FWZIzxdk8HYRurL3KIO.png)

[quote="shodanx, post:12, topic:220640"]
I have updated all luci packages to 25.365.52131~3ac2e08
[/quote]

[quote="shodanx, post:12, topic:220640"]
But oopsies, this broke my router !
[/quote]

(I recall other posts where it's been mentioned to you that one should not to blindly upgrade packages - but here's the warning again:)

Upgrading packages (via the CLI `opkg upgrade` command or the LuCI `Upgrade...` button) can result in major problems. It is generally highly [discouraged](https://openwrt.org/meta/infobox/upgrade_packages_warning), unless you know what you are doing or if there is [specific instruction](https://openwrt.org/advisory/start) to do so.

[quote="shodanx, post:12, topic:220640"]
To answer your question, here is the tags tab
[/quote]

Thanks - I was hoping that the developers would clarify.

-------------------------

shodanx | 2026-01-05 17:36:24 UTC | #14

To recap

tried overwriting dhcp.js with latest, that does not work

tried updating to luci 25.365, that does not work (sometimes it does) at the moment

flashed router to snapshot

learned that luci doesn’t come installed in snapshot, figured it out

The arrows indicate my confusion figuring this out

The problem is this tab

![image|689x52](upload://46IS1Hn9amOAWHCRIWudKgpbJ1q.png)

“Firmware-selector” doesn’t have luci install instructions, like the other two and that leads to confusion of how do you install luci

which is simply

`apk update ; apk add luci ; apk add luci-ssl ; /etc/init.d/uhttpd restart`

I think the reason you are not seeing the tags tab, is that you are on an older version ?

The router I just flashed is on luci 26.003.60747\~0d55a89

As systemcrash stated, you should see in the network menu, that DNS and DHCP is split

![image|143x290](upload://ylxUzIet1pQTnIJCWXrvpGENP2O.png)

Where you should find this, it works !

![image|594x287](upload://3JsvIy4rhptjt6H83jAob4ZxIg4.png)

And the reason for the last error I faced with “UH OH”

Is because I put the “match” in “set”, so, completely the wrong syntax and that borked my router.

It’s all fixed now !

Set tags

![image|690x115](upload://PVQFegUiZs7WTaHt6dpnfH0Yx8.png)

![image|483x427](upload://fyhk6v5WICxZZ1Uzj3Je76GuBbF.png)

Match tags

![image|634x500](upload://c44vWO45SF86lhFudGIpCKQRvrF.png)

![image|628x376](upload://bU9PRMRHdcxpax4YOrFN45EkHgR.png)

This is a per the following, the **--dhcp-mac**

![image|689x212](upload://wumvQuuIeaNbDFIIXkmQpchxyT7.png)

![image|690x204](upload://3hfDVvkZMFEKMMdJcabT0RQOF8Y.png)

I am uncertain if I am doing it correctly, “Apply these DHCP Options“ …

Here is the dnsmasq manual btw

https://thekelleys.org.uk/dnsmasq/docs/dnsmasq-man.html

The important parameters are
**--dhcp-vendorclass**
**--dhcp-userclass**
**--dhcp-mac**
**--dhcp-circuitid**
**--dhcp-subscrid**
**--dhcp-match**
**--dhcp-name-match**
**--tag-if**
**--dhcp-ignore**
**--dhcp-ignore-names**
**--dhcp-generate-names**
**--dhcp-broadcast**
**--dhcp-boot**
**--dhcp-reply-delay**
**--dhcp-option**

At this time, I have probably the wrong syntax in the match tags

https://www.incognito.com/tutorials/dhcp-options-in-plain-english/

It appears there is no DHCP option number or name for MAC

**--dhcp-match=set:,|option:|vi-encap:\[,\]**

So, what I need might be … **--dhcp-mac .. .?  But it used to work on my 23.05 router, I am confused !**

My current objective

Set option 3,10.0.0.254 and 6,10.0.0.254 to all MACs matching `de:ad:be:ef:*:*`

-------------------------

systemcrash | 2026-01-06 03:00:34 UTC | #15

I did not add the MAC tab (`--dhcp-mac`) because leases already has all of that functionality.

[quote="shodanx, post:14, topic:220640"]
\--tag-if

[/quote]

This is not implemented in the dnsmasq init script.

Those implemented in dmsmasq init currently are:

[quote="shodanx, post:14, topic:220640"]
**--dhcp-vendorclass**
**--dhcp-userclass**
**--dhcp-mac**
**--dhcp-circuitid**
**--dhcp-subscrid**
**--dhcp-match**
**--dhcp-ignore-names (sort of?)**
**--dhcp-broadcast (sort of)**
**--dhcp-boot**
**--dhcp-option**

[/quote]

But I implemented tabs for those you’re likely to encounter nowadays.

Great write-up by the way.

The GUI tab naming follows functionality, not their confusingly named uci conventions.

Match tags tab creates uci `tag` entries. The dnsmasq init script does  `xappend "--dhcp-option${force:+-force}=tag:$tag,$o"`. Note the `tag:`

Set tags tab creates uci `match` entries. The dnsmasq init script does `xappend "--dhcp-match=set:$networkid,$match"`. Note the `set:`

[quote="shodanx, post:14, topic:220640"]
Set option 3,10.0.0.254 and 6,10.0.0.254 to all MACs matching `de:ad:be:ef:*:*`

[/quote]

Match tags tab, create two. One with `3,10.0.0.254`. Name it `one`.  Second with `6,10.0.0.254`. Name it `two`. Under leases, create a lease with that MAC. Set tag `one` and `two`.

Under tags:

![Screenshot 2026-01-06 at 03.41.56|690x405](upload://7BLQtFW0D6AlkcinMnFblIqtJKH.png)

Under leases:

![Screenshot 2026-01-06 at 03.58.00|690x105](upload://theYNtJHXDUuw9ikBwvAdLvy3Yc.png)

This produces:

```
# cat /var/etc/dnsmasq.conf.cfg01411c

...
dhcp-host=de:ad:be:ef:*:*,set:router,set:domain_srv,dead
...
dhcp-option=tag:router,3,10.0.0.254
dhcp-option=tag:domain_srv,6,10.0.0.254
```

Match tags: dnsmasq conditionally applies chosen DHCP options when a specific `tag` is encountered. 

This means that a client that sends DHCP requests that match a tag somewhere, it gets the options under this named tag applied to it.

Set tags: "`match` these `option(6)`s to set this `tag`".

This means that dnsmasq tags a client request that contains that option, so that you can apply additional config to it via Match tags.

-------------------------

shodanx | 2026-01-06 03:22:19 UTC | #16

I’m also trying to figure out the PXE system now…

WIll come back to matching tags to assign options in a bit…

Example

![image|690x395](upload://fwRhSYvYaruW3xaCNfCKiDTEWW1.png)

Produces a conf file like this

root@router:\~# cat /tmp/etc/dnsmasq.conf.cfg01411c

# auto-generated config file from /etc/config/dhcp

```
conf-file=/etc/dnsmasq.conf
dhcp-authoritative
domain-needed
localise-queries
read-ethers
enable-ubus=dnsmasq
expand-hosts
enable-tftp
bind-dynamic
local-service
log-dhcp
cache-size=1000
edns-packet-max=1232
domain=lan
local=/lan/
addn-hosts=/tmp/hosts
dhcp-leasefile=/tmp/dhcp.leases
tftp-root=/www
resolv-file=/tmp/resolv.conf.d/resolv.conf.auto
stop-dns-rebind
rebind-localhost-ok
dhcp-broadcast=tag:needs-broadcast
conf-dir=/tmp/dnsmasq.cfg01411c.d
user=dnsmasq
group=dnsmasq

dhcp-ignore-names=tag:dhcp_bogus_hostname
conf-file=/usr/share/dnsmasq/dhcpbogushostname.conf
dhcp-boot=tag:test2,ipxe.efi
dhcp-option=test2,test1

bogus-priv
conf-file=/usr/share/dnsmasq/rfc6761.conf
dhcp-range=set:lan,10.0.0.100,10.0.0.249,255.255.0.0,12h
no-dhcp-interface=wan

root@router:~# cat /tmp/etc/dnsmasq.conf.cfg01411c | grep test1
dhcp-option=test2,test1
root@router:~#
```

So we’re getting these lines

`dhcp-boot=tag:test2,ipxe.efi`
`dhcp-option=test2,test1`

Looking at my old notes, which worked, but maybe aren’t the only way to do this

```
dhcp-match=set:x86-legacy,option:client-arch,0
dhcp-boot=tag:x86-legacy,ipxe.x86.undionly.kpxe,router.lan,192.168.1.1
```

https://forum.openwrt.org/t/feature-request-make-setting-up-ipxe-netbooting-easier-suggest-sane-defaults-suggest-boot-firmwares/153591

SO making some further tests

```
root@router:~# cat /tmp/etc/dnsmasq.conf.cfg01411c
# auto-generated config file from /etc/config/dhcp
conf-file=/etc/dnsmasq.conf
dhcp-authoritative
domain-needed
localise-queries
read-ethers
enable-ubus=dnsmasq
expand-hosts
enable-tftp
bind-dynamic
local-service
log-dhcp
cache-size=1000
edns-packet-max=1232
domain=lan
local=/lan/
addn-hosts=/tmp/hosts
dhcp-leasefile=/tmp/dhcp.leases
tftp-root=/www
resolv-file=/tmp/resolv.conf.d/resolv.conf.auto
stop-dns-rebind
rebind-localhost-ok
dhcp-broadcast=tag:needs-broadcast
conf-dir=/tmp/dnsmasq.cfg01411c.d
user=dnsmasq
group=dnsmasq


dhcp-ignore-names=tag:dhcp_bogus_hostname
conf-file=/usr/share/dnsmasq/dhcpbogushostname.conf
dhcp-boot=tag:test2,ipxe.efi,AAAAA,BBBBB
dhcp-option=test2,test1
dhcp-option=test2,testA
dhcp-option=tag:MYMATCHTAG,60,PXEClient:Arch:00000


bogus-priv
conf-file=/usr/share/dnsmasq/rfc6761.conf
dhcp-range=set:lan,10.0.0.100,10.0.0.249,255.255.0.0,12h
no-dhcp-interface=wan

root@router:~#

```

![image|630x499](upload://tv95Nm9RgXDqytWLBHeUYQuanzd.png)

![image|690x406](upload://oq05NS3cQ6SYLYv97LnnaJECXvs.png)

And here is how that works uci show

```
root@router:~# uci show dhcp
dhcp.@dnsmasq[0]=dnsmasq
dhcp.@dnsmasq[0].domainneeded='1'
dhcp.@dnsmasq[0].boguspriv='1'
dhcp.@dnsmasq[0].filterwin2k='0'
dhcp.@dnsmasq[0].localise_queries='1'
dhcp.@dnsmasq[0].rebind_protection='1'
dhcp.@dnsmasq[0].rebind_localhost='1'
dhcp.@dnsmasq[0].local='/lan/'
dhcp.@dnsmasq[0].domain='lan'
dhcp.@dnsmasq[0].expandhosts='1'
dhcp.@dnsmasq[0].nonegcache='0'
dhcp.@dnsmasq[0].cachesize='1000'
dhcp.@dnsmasq[0].authoritative='1'
dhcp.@dnsmasq[0].readethers='1'
dhcp.@dnsmasq[0].leasefile='/tmp/dhcp.leases'
dhcp.@dnsmasq[0].resolvfile='/tmp/resolv.conf.d/resolv.conf.auto'
dhcp.@dnsmasq[0].localservice='1'
dhcp.@dnsmasq[0].ednspacket_max='1232'
dhcp.@dnsmasq[0].filter_aaaa='0'
dhcp.@dnsmasq[0].filter_a='0'
dhcp.@dnsmasq[0].enable_tftp='1'
dhcp.@dnsmasq[0].tftp_root='/www'
dhcp.@dnsmasq[0].logdhcp='1'
dhcp.lan=dhcp
dhcp.lan.interface='lan'
dhcp.lan.start='100'
dhcp.lan.limit='150'
dhcp.lan.leasetime='12h'
dhcp.lan.dhcpv4='server'
dhcp.lan.dhcpv6='disabled'
dhcp.lan.ra='disabled'
dhcp.lan.ra_slaac='1'
dhcp.lan.ra_flags='managed-config' 'other-config'
dhcp.lan.ndp='disabled'
dhcp.wan=dhcp
dhcp.wan.interface='wan'
dhcp.wan.ignore='1'
dhcp.odhcpd=odhcpd
dhcp.odhcpd.leasefile='/tmp/odhcpd.leases'
dhcp.odhcpd.leasetrigger='/usr/sbin/odhcpd-update'
dhcp.odhcpd.loglevel='4'
dhcp.odhcpd.piodir='/tmp/odhcpd-piodir'
dhcp.odhcpd.hostsdir='/tmp/hosts'
dhcp.@boot[0]=boot
dhcp.@boot[0].filename='ipxe.efi'
dhcp.@boot[0].networkid='test2'
dhcp.@boot[0].servername='AAAAA'
dhcp.@boot[0].serveraddress='BBBBB'
dhcp.@boot[0].dhcp_option='test1' 'testA'
dhcp.MYMATCHTAG=tag
dhcp.MYMATCHTAG.dhcp_option='60,PXEClient:Arch:00000'
root@router:~#

```

Donc partie importante

```
dhcp.@boot[0]=boot
dhcp.@boot[0].filename='ipxe.efi'
dhcp.@boot[0].networkid='test2'
dhcp.@boot[0].servername='AAAAA'
dhcp.@boot[0].serveraddress='BBBBB'
dhcp.@boot[0].dhcp_option='test1' 'testA'
dhcp.MYMATCHTAG=tag
dhcp.MYMATCHTAG.dhcp_option='60,PXEClient:Arch:00000'
```

What matter is the dhcp-boot, and if dhcp-boot uses tags, then they must be valid

I think both dhcp-option and dhcp-match can set a tag on a client

```
dhcp-boot=[tag:<tag>,]<filename>,[<servername>[,<server address>|<tftp_servername>]]
```

```
dhcp-match=set:<tag>,<option number>|option:<option name>|vi-encap:<enterprise>[,<value>]
```

```
dhcp-option=[tag:<tag>,[tag:<tag>,]][encap:<opt>,][vi-encap:<enterprise>,][vendor:[<vendor-class>],][<opt>|option:<opt-name>|option6:<opt>|option6:<opt-name>],[<value>[,<value>]]
```

And we would want something like

```
dhcp-match=set:x86-legacy,option:client-arch,0
dhcp-boot=tag:x86-legacy,ipxe.pxe
```

So this might work

![image|690x50](upload://pXxMl7Y8vrIvcyTZJcoj3e64STB.png)

In uci show dhcp

`dhcp.@boot[0]=boot`
`dhcp.@boot[0].filename='ipxe.efi'`
`dhcp.@boot[0].networkid='x86-legacy'`
`dhcp.@boot[0].dhcp_option='option:client-arch,0'`

in dnsmasq.conf

![image|449x50](upload://bQ7XcQtn3yf9tAhFbsYM9fmbbYe.png)

That looks good to me

…… except wrong file

I think this rfc might be partly obsolete

https://www.rfc-editor.org/rfc/rfc4578.html#section-2.1

![image|255x243](upload://i0DORZihIU9yq9FV3of1hheFbdB.png)

Looks like Option 93 is stale …

https://forums.raspberrypi.com/viewtopic.php?t=279709

They’re using dhcp-mac … not great

there’s the ipv6 codes, they seem compatible with ipv4

![image|690x470](upload://6kPzRmIsijSkF5jRnsr0oR901vn.png)

-------------------------

shodanx | 2026-01-06 03:23:06 UTC | #17

Made this little script

I’m so tired my eyes are closing on their own

```
# Clear all existing boot entries
while uci -q delete dhcp.@boot[0]; do :; done

# Add x86 BIOS entry
uci add dhcp boot
uci set dhcp.@boot[-1].filename='ipxe.pxe'
uci add_list dhcp.@boot[-1].dhcp_option='option:client-arch,0'
uci set dhcp.@boot[-1].networkid='x86_BIOS'

# Add all other arches
for entry in \
"1:NEC_PC98:NEC_PC98.efi" \
"2:Itanium:Itanium.efi" \
"3:DEC_Alpha:DEC_Alpha.efi" \
"4:Arc_x86:Arc_x86.efi" \
"5:Lean_Client:Lean_Client.efi" \
"6:UEFI_x86:ipxe.efi" \
"7:UEFI_x64:ipxe.efi" \
"8:UEFI_Xscale:UEFI_Xscale.efi" \
"9:EBC:EBC.efi" \
"10:ARM32_EFI:bootaa32.efi" \
"11:ARM64_EFI:bootaa64.efi" \
"12:PowerPC_OFW:PowerPC_OFW.efi" \
"13:PowerPC_ePAPR:PowerPC_ePAPR.efi" \
"14:POWER_OPAL_v3:POWER_OPAL_v3.efi" \
"15:UEFI_x86_http:ipxe.efi" \
"16:UEFI_x64_http:ipxe.efi" \
"17:EBC_http:EBC_http.efi" \
"18:ARM32_http:bootaa32.efi" \
"19:ARM64_http:bootaa64.efi" \
"20:PCAT_BIOS_http:ipxe.pxe" \
"21:UBoot_ARM32:UBoot_ARM32.efi" \
"22:UBoot_ARM64:UBoot_ARM64.efi" \
"23:UBoot_ARM32_http:UBoot_ARM32_http.efi" \
"24:UBoot_ARM64_http:UBoot_ARM64_http.efi" \
"25:RISC-V_32:RISC-V_32.efi" \
"26:RISC-V_32_http:RISC-V_32_http.efi" \
"27:RISC-V_64:RISC-V_64.efi" \
"28:RISC-V_64_http:RISC-V_64_http.efi" \
"29:RISC-V_128:RISC-V_128.efi" \
"30:RISC-V_128_http:RISC-V_128_http.efi" \
"31:s390_Basic:s390_Basic.efi" \
"32:s390_Extended:s390_Extended.efi" \
"33:MIPS_32:MIPS_32.efi" \
"34:MIPS_64:MIPS_64.efi" \
"35:Sunway_32:Sunway_32.efi" \
"36:Sunway_64:Sunway_64.efi" \
"37:LoongArch_32:LoongArch_32.efi" \
"38:LoongArch_32_http:LoongArch_32_http.efi" \
"39:LoongArch_64:LoongArch_64.efi" \
"40:LoongArch_64_http:LoongArch_64_http.efi" \
"41:arm_rpiboot:arm_rpiboot.efi"; do
  id="${entry%%:*}"
  rest="${entry#*:}"
  arch="${rest%%:*}"
  file="${rest#*:}"
  uci add dhcp boot
  uci set dhcp.@boot[-1].filename="$file"
  uci add_list dhcp.@boot[-1].dhcp_option="option:client-arch,$id"
  uci set dhcp.@boot[-1].networkid="$arch"
done

# Show changes and commit
uci changes
```

pasted in

```
root@router:~# # Add all other arches
root@router:~# for entry in \
> "1:NEC_PC98:NEC_PC98.efi" \
> "2:Itanium:Itanium.efi" \
> "3:DEC_Alpha:DEC_Alpha.efi" \
> "4:Arc_x86:Arc_x86.efi" \
> "5:Lean_Client:Lean_Client.efi" \
> "6:UEFI_x86:ipxe.efi" \
> "7:UEFI_x64:ipxe.efi" \
> "8:UEFI_Xscale:UEFI_Xscale.efi" \
> "9:EBC:EBC.efi" \
> "10:ARM32_EFI:bootaa32.efi" \
> "11:ARM64_EFI:bootaa64.efi" \
> "12:PowerPC_OFW:PowerPC_OFW.efi" \
> "13:PowerPC_ePAPR:PowerPC_ePAPR.efi" \
> "14:POWER_OPAL_v3:POWER_OPAL_v3.efi" \
> "15:UEFI_x86_http:ipxe.efi" \
> "16:UEFI_x64_http:ipxe.efi" \
> "17:EBC_http:EBC_http.efi" \
> "18:ARM32_http:bootaa32.efi" \
> "19:ARM64_http:bootaa64.efi" \
> "20:PCAT_BIOS_http:ipxe.pxe" \
> "21:UBoot_ARM32:UBoot_ARM32.efi" \
> "22:UBoot_ARM64:UBoot_ARM64.efi" \
> "23:UBoot_ARM32_http:UBoot_ARM32_http.efi" \
> "24:UBoot_ARM64_http:UBoot_ARM64_http.efi" \
> "25:RISC-V_32:RISC-V_32.efi" \
> "26:RISC-V_32_http:RISC-V_32_http.efi" \
> "27:RISC-V_64:RISC-V_64.efi" \
> "28:RISC-V_64_http:RISC-V_64_http.efi" \
> "29:RISC-V_128:RISC-V_128.efi" \
> "30:RISC-V_128_http:RISC-V_128_http.efi" \
> "31:s390_Basic:s390_Basic.efi" \
> "32:s390_Extended:s390_Extended.efi" \
> "33:MIPS_32:MIPS_32.efi" \
> "34:MIPS_64:MIPS_64.efi" \
> "35:Sunway_32:Sunway_32.efi" \
> "36:Sunway_64:Sunway_64.efi" \
> "37:LoongArch_32:LoongArch_32.efi" \
> "38:LoongArch_32_http:LoongArch_32_http.efi" \
> "39:LoongArch_64:LoongArch_64.efi" \
> "40:LoongArch_64_http:LoongArch_64_http.efi" \
> "41:arm_rpiboot:arm_rpiboot.efi"; do
>   id="${entry%%:*}"
>   rest="${entry#*:}"
>   arch="${rest%%:*}"
>   file="${rest#*:}"
>   uci add dhcp boot
>   uci set dhcp.@boot[-1].filename="$file"
>   uci add_list dhcp.@boot[-1].dhcp_option="option:client-arch,$id"
>   uci set dhcp.@boot[-1].networkid="$arch"
> done
cfg06b399
cfg07b399
cfg08b399
cfg09b399
cfg0ab399
cfg0bb399
cfg0cb399
cfg0db399
cfg0eb399
cfg0fb399
cfg10b399
cfg11b399
cfg12b399
cfg13b399
cfg14b399
cfg15b399
cfg16b399
cfg17b399
cfg18b399
cfg19b399
cfg1ab399
cfg1bb399
cfg1cb399
cfg1db399
cfg1eb399
cfg1fb399
cfg20b399
cfg21b399
cfg22b399
cfg23b399
cfg24b399
cfg25b399
cfg26b399
cfg27b399
cfg28b399
cfg29b399
cfg2ab399
cfg2bb399
cfg2cb399
cfg2db399
cfg2eb399
root@router:~#
root@router:~# # Show changes and commit
root@router:~# uci changes
dhcp.cfg05b399='boot'
dhcp.cfg05b399.filename='ipxe.pxe'
dhcp.cfg05b399.dhcp_option+='option:client-arch,0'
dhcp.cfg05b399.networkid='x86_BIOS'
dhcp.cfg06b399='boot'
dhcp.cfg06b399.filename='NEC_PC98.efi'
dhcp.cfg06b399.dhcp_option+='option:client-arch,1'
dhcp.cfg06b399.networkid='NEC_PC98'
dhcp.cfg07b399='boot'
dhcp.cfg07b399.filename='Itanium.efi'
dhcp.cfg07b399.dhcp_option+='option:client-arch,2'
dhcp.cfg07b399.networkid='Itanium'
dhcp.cfg08b399='boot'
dhcp.cfg08b399.filename='DEC_Alpha.efi'
dhcp.cfg08b399.dhcp_option+='option:client-arch,3'
dhcp.cfg08b399.networkid='DEC_Alpha'
dhcp.cfg09b399='boot'
dhcp.cfg09b399.filename='Arc_x86.efi'
dhcp.cfg09b399.dhcp_option+='option:client-arch,4'
dhcp.cfg09b399.networkid='Arc_x86'
dhcp.cfg0ab399='boot'
dhcp.cfg0ab399.filename='Lean_Client.efi'
dhcp.cfg0ab399.dhcp_option+='option:client-arch,5'
dhcp.cfg0ab399.networkid='Lean_Client'
dhcp.cfg0bb399='boot'
dhcp.cfg0bb399.filename='ipxe.efi'
dhcp.cfg0bb399.dhcp_option+='option:client-arch,6'
dhcp.cfg0bb399.networkid='UEFI_x86'
dhcp.cfg0cb399='boot'
dhcp.cfg0cb399.filename='ipxe.efi'
dhcp.cfg0cb399.dhcp_option+='option:client-arch,7'
dhcp.cfg0cb399.networkid='UEFI_x64'
dhcp.cfg0db399='boot'
dhcp.cfg0db399.filename='UEFI_Xscale.efi'
dhcp.cfg0db399.dhcp_option+='option:client-arch,8'
dhcp.cfg0db399.networkid='UEFI_Xscale'
dhcp.cfg0eb399='boot'
dhcp.cfg0eb399.filename='EBC.efi'
dhcp.cfg0eb399.dhcp_option+='option:client-arch,9'
dhcp.cfg0eb399.networkid='EBC'
dhcp.cfg0fb399='boot'
dhcp.cfg0fb399.filename='bootaa32.efi'
dhcp.cfg0fb399.dhcp_option+='option:client-arch,10'
dhcp.cfg0fb399.networkid='ARM32_EFI'
dhcp.cfg10b399='boot'
dhcp.cfg10b399.filename='bootaa64.efi'
dhcp.cfg10b399.dhcp_option+='option:client-arch,11'
dhcp.cfg10b399.networkid='ARM64_EFI'
dhcp.cfg11b399='boot'
dhcp.cfg11b399.filename='PowerPC_OFW.efi'
dhcp.cfg11b399.dhcp_option+='option:client-arch,12'
dhcp.cfg11b399.networkid='PowerPC_OFW'
dhcp.cfg12b399='boot'
dhcp.cfg12b399.filename='PowerPC_ePAPR.efi'
dhcp.cfg12b399.dhcp_option+='option:client-arch,13'
dhcp.cfg12b399.networkid='PowerPC_ePAPR'
dhcp.cfg13b399='boot'
dhcp.cfg13b399.filename='POWER_OPAL_v3.efi'
dhcp.cfg13b399.dhcp_option+='option:client-arch,14'
dhcp.cfg13b399.networkid='POWER_OPAL_v3'
dhcp.cfg14b399='boot'
dhcp.cfg14b399.filename='ipxe.efi'
dhcp.cfg14b399.dhcp_option+='option:client-arch,15'
dhcp.cfg14b399.networkid='UEFI_x86_http'
dhcp.cfg15b399='boot'
dhcp.cfg15b399.filename='ipxe.efi'
dhcp.cfg15b399.dhcp_option+='option:client-arch,16'
dhcp.cfg15b399.networkid='UEFI_x64_http'
dhcp.cfg16b399='boot'
dhcp.cfg16b399.filename='EBC_http.efi'
dhcp.cfg16b399.dhcp_option+='option:client-arch,17'
dhcp.cfg16b399.networkid='EBC_http'
dhcp.cfg17b399='boot'
dhcp.cfg17b399.filename='bootaa32.efi'
dhcp.cfg17b399.dhcp_option+='option:client-arch,18'
dhcp.cfg17b399.networkid='ARM32_http'
dhcp.cfg18b399='boot'
dhcp.cfg18b399.filename='bootaa64.efi'
dhcp.cfg18b399.dhcp_option+='option:client-arch,19'
dhcp.cfg18b399.networkid='ARM64_http'
dhcp.cfg19b399='boot'
dhcp.cfg19b399.filename='ipxe.pxe'
dhcp.cfg19b399.dhcp_option+='option:client-arch,20'
dhcp.cfg19b399.networkid='PCAT_BIOS_http'
dhcp.cfg1ab399='boot'
dhcp.cfg1ab399.filename='UBoot_ARM32.efi'
dhcp.cfg1ab399.dhcp_option+='option:client-arch,21'
dhcp.cfg1ab399.networkid='UBoot_ARM32'
dhcp.cfg1bb399='boot'
dhcp.cfg1bb399.filename='UBoot_ARM64.efi'
dhcp.cfg1bb399.dhcp_option+='option:client-arch,22'
dhcp.cfg1bb399.networkid='UBoot_ARM64'
dhcp.cfg1cb399='boot'
dhcp.cfg1cb399.filename='UBoot_ARM32_http.efi'
dhcp.cfg1cb399.dhcp_option+='option:client-arch,23'
dhcp.cfg1cb399.networkid='UBoot_ARM32_http'
dhcp.cfg1db399='boot'
dhcp.cfg1db399.filename='UBoot_ARM64_http.efi'
dhcp.cfg1db399.dhcp_option+='option:client-arch,24'
dhcp.cfg1db399.networkid='UBoot_ARM64_http'
dhcp.cfg1eb399='boot'
dhcp.cfg1eb399.filename='RISC-V_32.efi'
dhcp.cfg1eb399.dhcp_option+='option:client-arch,25'
dhcp.cfg1eb399.networkid='RISC-V_32'
dhcp.cfg1fb399='boot'
dhcp.cfg1fb399.filename='RISC-V_32_http.efi'
dhcp.cfg1fb399.dhcp_option+='option:client-arch,26'
dhcp.cfg1fb399.networkid='RISC-V_32_http'
dhcp.cfg20b399='boot'
dhcp.cfg20b399.filename='RISC-V_64.efi'
dhcp.cfg20b399.dhcp_option+='option:client-arch,27'
dhcp.cfg20b399.networkid='RISC-V_64'
dhcp.cfg21b399='boot'
dhcp.cfg21b399.filename='RISC-V_64_http.efi'
dhcp.cfg21b399.dhcp_option+='option:client-arch,28'
dhcp.cfg21b399.networkid='RISC-V_64_http'
dhcp.cfg22b399='boot'
dhcp.cfg22b399.filename='RISC-V_128.efi'
dhcp.cfg22b399.dhcp_option+='option:client-arch,29'
dhcp.cfg22b399.networkid='RISC-V_128'
dhcp.cfg23b399='boot'
dhcp.cfg23b399.filename='RISC-V_128_http.efi'
dhcp.cfg23b399.dhcp_option+='option:client-arch,30'
dhcp.cfg23b399.networkid='RISC-V_128_http'
dhcp.cfg24b399='boot'
dhcp.cfg24b399.filename='s390_Basic.efi'
dhcp.cfg24b399.dhcp_option+='option:client-arch,31'
dhcp.cfg24b399.networkid='s390_Basic'
dhcp.cfg25b399='boot'
dhcp.cfg25b399.filename='s390_Extended.efi'
dhcp.cfg25b399.dhcp_option+='option:client-arch,32'
dhcp.cfg25b399.networkid='s390_Extended'
dhcp.cfg26b399='boot'
dhcp.cfg26b399.filename='MIPS_32.efi'
dhcp.cfg26b399.dhcp_option+='option:client-arch,33'
dhcp.cfg26b399.networkid='MIPS_32'
dhcp.cfg27b399='boot'
dhcp.cfg27b399.filename='MIPS_64.efi'
dhcp.cfg27b399.dhcp_option+='option:client-arch,34'
dhcp.cfg27b399.networkid='MIPS_64'
dhcp.cfg28b399='boot'
dhcp.cfg28b399.filename='Sunway_32.efi'
dhcp.cfg28b399.dhcp_option+='option:client-arch,35'
dhcp.cfg28b399.networkid='Sunway_32'
dhcp.cfg29b399='boot'
dhcp.cfg29b399.filename='Sunway_64.efi'
dhcp.cfg29b399.dhcp_option+='option:client-arch,36'
dhcp.cfg29b399.networkid='Sunway_64'
dhcp.cfg2ab399='boot'
dhcp.cfg2ab399.filename='LoongArch_32.efi'
dhcp.cfg2ab399.dhcp_option+='option:client-arch,37'
dhcp.cfg2ab399.networkid='LoongArch_32'
dhcp.cfg2bb399='boot'
dhcp.cfg2bb399.filename='LoongArch_32_http.efi'
dhcp.cfg2bb399.dhcp_option+='option:client-arch,38'
dhcp.cfg2bb399.networkid='LoongArch_32_http'
dhcp.cfg2cb399='boot'
dhcp.cfg2cb399.filename='LoongArch_64.efi'
dhcp.cfg2cb399.dhcp_option+='option:client-arch,39'
dhcp.cfg2cb399.networkid='LoongArch_64'
dhcp.cfg2db399='boot'
dhcp.cfg2db399.filename='LoongArch_64_http.efi'
dhcp.cfg2db399.dhcp_option+='option:client-arch,40'
dhcp.cfg2db399.networkid='LoongArch_64_http'
dhcp.cfg2eb399='boot'
dhcp.cfg2eb399.filename='arm_rpiboot.efi'
dhcp.cfg2eb399.dhcp_option+='option:client-arch,41'
dhcp.cfg2eb399.networkid='arm_rpiboot'
root@router:~# uci commit
root@router:~#

```

Ok looks good

![image|238x500](upload://vGZegGgtuQKzMJWJTs05MTikGZo.png)

-------------------------

shodanx | 2026-01-06 03:23:12 UTC | #18

But won’t work

```
root@router:~# logread  -f
Mon Jan  5 22:18:00 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 available DHCP range: 10.0.0.100 -- 10.0.0.249
Mon Jan  5 22:18:00 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 vendor class: PXEClient:Arch:00007:UNDI:003016
Mon Jan  5 22:18:00 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 DHCPDISCOVER(br-lan) ec:21:e5:42:1d:4f
Mon Jan  5 22:18:00 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 tags: lan, br-lan
Mon Jan  5 22:18:00 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 DHCPOFFER(br-lan) 10.0.0.135 ec:21:e5:42:1d:4f
Mon Jan  5 22:18:00 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 1:netmask, 2:time-offset, 3:router, 4, 5,
Mon Jan  5 22:18:00 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 6:dns-server, 12:hostname, 13:boot-file-size,
Mon Jan  5 22:18:00 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 15:domain-name, 17:root-path, 18:extension-path,
Mon Jan  5 22:18:00 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 22:max-datagram-reassembly, 23:default-ttl,
Mon Jan  5 22:18:00 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 28:broadcast, 40:nis-domain, 41:nis-server,
Mon Jan  5 22:18:00 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 42:ntp-server, 43:vendor-encap, 50:requested-address,
Mon Jan  5 22:18:00 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 51:lease-time, 54:server-identifier, 58:T1,
Mon Jan  5 22:18:00 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 59:T2, 60:vendor-class, 66:tftp-server, 67:bootfile-name,
Mon Jan  5 22:18:00 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 97:client-machine-id, 128, 129, 130, 131,
Mon Jan  5 22:18:00 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 132, 133, 134, 135
Mon Jan  5 22:18:00 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 next server: 10.0.0.1
Mon Jan  5 22:18:00 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 broadcast response
Mon Jan  5 22:18:00 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  1 option: 53 message-type  2
Mon Jan  5 22:18:00 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option: 54 server-identifier  10.0.0.1
Mon Jan  5 22:18:00 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option: 51 lease-time  12h
Mon Jan  5 22:18:00 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option: 58 T1  6h
Mon Jan  5 22:18:00 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option: 59 T2  10h30m
Mon Jan  5 22:18:00 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option:  1 netmask  255.255.0.0
Mon Jan  5 22:18:00 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option: 28 broadcast  10.0.255.255
Mon Jan  5 22:18:00 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option:  3 router  10.0.0.1
Mon Jan  5 22:18:00 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option:  6 dns-server  10.0.0.1
Mon Jan  5 22:18:00 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  3 option: 15 domain-name  lan
Mon Jan  5 22:18:03 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 available DHCP range: 10.0.0.100 -- 10.0.0.249
Mon Jan  5 22:18:03 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 vendor class: PXEClient:Arch:00007:UNDI:003016
Mon Jan  5 22:18:03 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 DHCPDISCOVER(br-lan) ec:21:e5:42:1d:4f
Mon Jan  5 22:18:03 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 tags: lan, br-lan
Mon Jan  5 22:18:03 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 DHCPOFFER(br-lan) 10.0.0.135 ec:21:e5:42:1d:4f
Mon Jan  5 22:18:03 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 1:netmask, 2:time-offset, 3:router, 4, 5,
Mon Jan  5 22:18:03 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 6:dns-server, 12:hostname, 13:boot-file-size,
Mon Jan  5 22:18:03 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 15:domain-name, 17:root-path, 18:extension-path,
Mon Jan  5 22:18:03 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 22:max-datagram-reassembly, 23:default-ttl,
Mon Jan  5 22:18:03 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 28:broadcast, 40:nis-domain, 41:nis-server,
Mon Jan  5 22:18:03 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 42:ntp-server, 43:vendor-encap, 50:requested-address,
Mon Jan  5 22:18:03 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 51:lease-time, 54:server-identifier, 58:T1,
Mon Jan  5 22:18:03 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 59:T2, 60:vendor-class, 66:tftp-server, 67:bootfile-name,
Mon Jan  5 22:18:03 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 97:client-machine-id, 128, 129, 130, 131,
Mon Jan  5 22:18:03 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 132, 133, 134, 135
Mon Jan  5 22:18:03 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 next server: 10.0.0.1
Mon Jan  5 22:18:03 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 broadcast response
Mon Jan  5 22:18:03 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  1 option: 53 message-type  2
Mon Jan  5 22:18:03 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option: 54 server-identifier  10.0.0.1
Mon Jan  5 22:18:03 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option: 51 lease-time  12h
Mon Jan  5 22:18:03 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option: 58 T1  6h
Mon Jan  5 22:18:03 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option: 59 T2  10h30m
Mon Jan  5 22:18:03 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option:  1 netmask  255.255.0.0
Mon Jan  5 22:18:03 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option: 28 broadcast  10.0.255.255
Mon Jan  5 22:18:03 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option:  3 router  10.0.0.1
Mon Jan  5 22:18:03 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option:  6 dns-server  10.0.0.1
Mon Jan  5 22:18:03 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  3 option: 15 domain-name  lan
Mon Jan  5 22:18:11 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 available DHCP range: 10.0.0.100 -- 10.0.0.249
Mon Jan  5 22:18:11 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 vendor class: PXEClient:Arch:00007:UNDI:003016
Mon Jan  5 22:18:11 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 DHCPDISCOVER(br-lan) ec:21:e5:42:1d:4f
Mon Jan  5 22:18:11 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 tags: lan, br-lan
Mon Jan  5 22:18:11 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 DHCPOFFER(br-lan) 10.0.0.135 ec:21:e5:42:1d:4f
Mon Jan  5 22:18:11 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 1:netmask, 2:time-offset, 3:router, 4, 5,
Mon Jan  5 22:18:11 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 6:dns-server, 12:hostname, 13:boot-file-size,
Mon Jan  5 22:18:11 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 15:domain-name, 17:root-path, 18:extension-path,
Mon Jan  5 22:18:11 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 22:max-datagram-reassembly, 23:default-ttl,
Mon Jan  5 22:18:11 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 28:broadcast, 40:nis-domain, 41:nis-server,
Mon Jan  5 22:18:11 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 42:ntp-server, 43:vendor-encap, 50:requested-address,
Mon Jan  5 22:18:11 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 51:lease-time, 54:server-identifier, 58:T1,
Mon Jan  5 22:18:11 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 59:T2, 60:vendor-class, 66:tftp-server, 67:bootfile-name,
Mon Jan  5 22:18:11 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 97:client-machine-id, 128, 129, 130, 131,
Mon Jan  5 22:18:11 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 132, 133, 134, 135
Mon Jan  5 22:18:11 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 next server: 10.0.0.1
Mon Jan  5 22:18:11 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 broadcast response
Mon Jan  5 22:18:11 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  1 option: 53 message-type  2
Mon Jan  5 22:18:11 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option: 54 server-identifier  10.0.0.1
Mon Jan  5 22:18:11 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option: 51 lease-time  12h
Mon Jan  5 22:18:11 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option: 58 T1  6h
Mon Jan  5 22:18:11 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option: 59 T2  10h30m
Mon Jan  5 22:18:11 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option:  1 netmask  255.255.0.0
Mon Jan  5 22:18:11 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option: 28 broadcast  10.0.255.255
Mon Jan  5 22:18:11 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option:  3 router  10.0.0.1
Mon Jan  5 22:18:11 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option:  6 dns-server  10.0.0.1
Mon Jan  5 22:18:11 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  3 option: 15 domain-name  lan
Mon Jan  5 22:18:27 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 available DHCP range: 10.0.0.100 -- 10.0.0.249
Mon Jan  5 22:18:27 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 vendor class: PXEClient:Arch:00007:UNDI:003016
Mon Jan  5 22:18:27 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 DHCPDISCOVER(br-lan) ec:21:e5:42:1d:4f
Mon Jan  5 22:18:27 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 tags: lan, br-lan
Mon Jan  5 22:18:27 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 DHCPOFFER(br-lan) 10.0.0.135 ec:21:e5:42:1d:4f
Mon Jan  5 22:18:27 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 1:netmask, 2:time-offset, 3:router, 4, 5,
Mon Jan  5 22:18:27 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 6:dns-server, 12:hostname, 13:boot-file-size,
Mon Jan  5 22:18:27 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 15:domain-name, 17:root-path, 18:extension-path,
Mon Jan  5 22:18:27 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 22:max-datagram-reassembly, 23:default-ttl,
Mon Jan  5 22:18:27 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 28:broadcast, 40:nis-domain, 41:nis-server,
Mon Jan  5 22:18:27 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 42:ntp-server, 43:vendor-encap, 50:requested-address,
Mon Jan  5 22:18:27 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 51:lease-time, 54:server-identifier, 58:T1,
Mon Jan  5 22:18:27 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 59:T2, 60:vendor-class, 66:tftp-server, 67:bootfile-name,
Mon Jan  5 22:18:27 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 97:client-machine-id, 128, 129, 130, 131,
Mon Jan  5 22:18:27 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 requested options: 132, 133, 134, 135
Mon Jan  5 22:18:27 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 next server: 10.0.0.1
Mon Jan  5 22:18:27 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 broadcast response
Mon Jan  5 22:18:27 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  1 option: 53 message-type  2
Mon Jan  5 22:18:27 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option: 54 server-identifier  10.0.0.1
Mon Jan  5 22:18:27 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option: 51 lease-time  12h
Mon Jan  5 22:18:27 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option: 58 T1  6h
Mon Jan  5 22:18:27 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option: 59 T2  10h30m
Mon Jan  5 22:18:27 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option:  1 netmask  255.255.0.0
Mon Jan  5 22:18:27 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option: 28 broadcast  10.0.255.255
Mon Jan  5 22:18:27 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option:  3 router  10.0.0.1
Mon Jan  5 22:18:27 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  4 option:  6 dns-server  10.0.0.1
Mon Jan  5 22:18:27 2026 daemon.info dnsmasq-dhcp[1]: 3308060335 sent size:  3 option: 15 domain-name  lan
^Croot@router:~#

```

```
root@router:~# uci show dhcp
dhcp.@dnsmasq[0]=dnsmasq
dhcp.@dnsmasq[0].domainneeded='1'
dhcp.@dnsmasq[0].boguspriv='1'
dhcp.@dnsmasq[0].filterwin2k='0'
dhcp.@dnsmasq[0].localise_queries='1'
dhcp.@dnsmasq[0].rebind_protection='1'
dhcp.@dnsmasq[0].rebind_localhost='1'
dhcp.@dnsmasq[0].local='/lan/'
dhcp.@dnsmasq[0].domain='lan'
dhcp.@dnsmasq[0].expandhosts='1'
dhcp.@dnsmasq[0].nonegcache='0'
dhcp.@dnsmasq[0].cachesize='1000'
dhcp.@dnsmasq[0].authoritative='1'
dhcp.@dnsmasq[0].readethers='1'
dhcp.@dnsmasq[0].leasefile='/tmp/dhcp.leases'
dhcp.@dnsmasq[0].resolvfile='/tmp/resolv.conf.d/resolv.conf.auto'
dhcp.@dnsmasq[0].localservice='1'
dhcp.@dnsmasq[0].ednspacket_max='1232'
dhcp.@dnsmasq[0].filter_aaaa='0'
dhcp.@dnsmasq[0].filter_a='0'
dhcp.@dnsmasq[0].enable_tftp='1'
dhcp.@dnsmasq[0].tftp_root='/www'
dhcp.@dnsmasq[0].logdhcp='1'
dhcp.lan=dhcp
dhcp.lan.interface='lan'
dhcp.lan.start='100'
dhcp.lan.limit='150'
dhcp.lan.leasetime='12h'
dhcp.lan.dhcpv4='server'
dhcp.lan.dhcpv6='disabled'
dhcp.lan.ra='disabled'
dhcp.lan.ra_slaac='1'
dhcp.lan.ra_flags='managed-config' 'other-config'
dhcp.lan.ndp='disabled'
dhcp.wan=dhcp
dhcp.wan.interface='wan'
dhcp.wan.ignore='1'
dhcp.odhcpd=odhcpd
dhcp.odhcpd.leasefile='/tmp/odhcpd.leases'
dhcp.odhcpd.leasetrigger='/usr/sbin/odhcpd-update'
dhcp.odhcpd.loglevel='4'
dhcp.odhcpd.piodir='/tmp/odhcpd-piodir'
dhcp.odhcpd.hostsdir='/tmp/hosts'
dhcp.@boot[0]=boot
dhcp.@boot[0].filename='ipxe.pxe'
dhcp.@boot[0].dhcp_option='option:client-arch,0'
dhcp.@boot[0].networkid='x86_BIOS'
dhcp.@boot[1]=boot
dhcp.@boot[1].filename='NEC_PC98.efi'
dhcp.@boot[1].dhcp_option='option:client-arch,1'
dhcp.@boot[1].networkid='NEC_PC98'
dhcp.@boot[2]=boot
dhcp.@boot[2].filename='Itanium.efi'
dhcp.@boot[2].dhcp_option='option:client-arch,2'
dhcp.@boot[2].networkid='Itanium'
dhcp.@boot[3]=boot
dhcp.@boot[3].filename='DEC_Alpha.efi'
dhcp.@boot[3].dhcp_option='option:client-arch,3'
dhcp.@boot[3].networkid='DEC_Alpha'
dhcp.@boot[4]=boot
dhcp.@boot[4].filename='Arc_x86.efi'
dhcp.@boot[4].dhcp_option='option:client-arch,4'
dhcp.@boot[4].networkid='Arc_x86'
dhcp.@boot[5]=boot
dhcp.@boot[5].filename='Lean_Client.efi'
dhcp.@boot[5].dhcp_option='option:client-arch,5'
dhcp.@boot[5].networkid='Lean_Client'
dhcp.@boot[6]=boot
dhcp.@boot[6].filename='ipxe.efi'
dhcp.@boot[6].dhcp_option='option:client-arch,6'
dhcp.@boot[6].networkid='UEFI_x86'
dhcp.@boot[7]=boot
dhcp.@boot[7].filename='ipxe.efi'
dhcp.@boot[7].dhcp_option='option:client-arch,7'
dhcp.@boot[7].networkid='UEFI_x64'
dhcp.@boot[8]=boot
dhcp.@boot[8].filename='UEFI_Xscale.efi'
dhcp.@boot[8].dhcp_option='option:client-arch,8'
dhcp.@boot[8].networkid='UEFI_Xscale'
dhcp.@boot[9]=boot
dhcp.@boot[9].filename='EBC.efi'
dhcp.@boot[9].dhcp_option='option:client-arch,9'
dhcp.@boot[9].networkid='EBC'
dhcp.@boot[10]=boot
dhcp.@boot[10].filename='bootaa32.efi'
dhcp.@boot[10].dhcp_option='option:client-arch,10'
dhcp.@boot[10].networkid='ARM32_EFI'
dhcp.@boot[11]=boot
dhcp.@boot[11].filename='bootaa64.efi'
dhcp.@boot[11].dhcp_option='option:client-arch,11'
dhcp.@boot[11].networkid='ARM64_EFI'
dhcp.@boot[12]=boot
dhcp.@boot[12].filename='PowerPC_OFW.efi'
dhcp.@boot[12].dhcp_option='option:client-arch,12'
dhcp.@boot[12].networkid='PowerPC_OFW'
dhcp.@boot[13]=boot
dhcp.@boot[13].filename='PowerPC_ePAPR.efi'
dhcp.@boot[13].dhcp_option='option:client-arch,13'
dhcp.@boot[13].networkid='PowerPC_ePAPR'
dhcp.@boot[14]=boot
dhcp.@boot[14].filename='POWER_OPAL_v3.efi'
dhcp.@boot[14].dhcp_option='option:client-arch,14'
dhcp.@boot[14].networkid='POWER_OPAL_v3'
dhcp.@boot[15]=boot
dhcp.@boot[15].filename='ipxe.efi'
dhcp.@boot[15].dhcp_option='option:client-arch,15'
dhcp.@boot[15].networkid='UEFI_x86_http'
dhcp.@boot[16]=boot
dhcp.@boot[16].filename='ipxe.efi'
dhcp.@boot[16].dhcp_option='option:client-arch,16'
dhcp.@boot[16].networkid='UEFI_x64_http'
dhcp.@boot[17]=boot
dhcp.@boot[17].filename='EBC_http.efi'
dhcp.@boot[17].dhcp_option='option:client-arch,17'
dhcp.@boot[17].networkid='EBC_http'
dhcp.@boot[18]=boot
dhcp.@boot[18].filename='bootaa32.efi'
dhcp.@boot[18].dhcp_option='option:client-arch,18'
dhcp.@boot[18].networkid='ARM32_http'
dhcp.@boot[19]=boot
dhcp.@boot[19].filename='bootaa64.efi'
dhcp.@boot[19].dhcp_option='option:client-arch,19'
dhcp.@boot[19].networkid='ARM64_http'
dhcp.@boot[20]=boot
dhcp.@boot[20].filename='ipxe.pxe'
dhcp.@boot[20].dhcp_option='option:client-arch,20'
dhcp.@boot[20].networkid='PCAT_BIOS_http'
dhcp.@boot[21]=boot
dhcp.@boot[21].filename='UBoot_ARM32.efi'
dhcp.@boot[21].dhcp_option='option:client-arch,21'
dhcp.@boot[21].networkid='UBoot_ARM32'
dhcp.@boot[22]=boot
dhcp.@boot[22].filename='UBoot_ARM64.efi'
dhcp.@boot[22].dhcp_option='option:client-arch,22'
dhcp.@boot[22].networkid='UBoot_ARM64'
dhcp.@boot[23]=boot
dhcp.@boot[23].filename='UBoot_ARM32_http.efi'
dhcp.@boot[23].dhcp_option='option:client-arch,23'
dhcp.@boot[23].networkid='UBoot_ARM32_http'
dhcp.@boot[24]=boot
dhcp.@boot[24].filename='UBoot_ARM64_http.efi'
dhcp.@boot[24].dhcp_option='option:client-arch,24'
dhcp.@boot[24].networkid='UBoot_ARM64_http'
dhcp.@boot[25]=boot
dhcp.@boot[25].filename='RISC-V_32.efi'
dhcp.@boot[25].dhcp_option='option:client-arch,25'
dhcp.@boot[25].networkid='RISC-V_32'
dhcp.@boot[26]=boot
dhcp.@boot[26].filename='RISC-V_32_http.efi'
dhcp.@boot[26].dhcp_option='option:client-arch,26'
dhcp.@boot[26].networkid='RISC-V_32_http'
dhcp.@boot[27]=boot
dhcp.@boot[27].filename='RISC-V_64.efi'
dhcp.@boot[27].dhcp_option='option:client-arch,27'
dhcp.@boot[27].networkid='RISC-V_64'
dhcp.@boot[28]=boot
dhcp.@boot[28].filename='RISC-V_64_http.efi'
dhcp.@boot[28].dhcp_option='option:client-arch,28'
dhcp.@boot[28].networkid='RISC-V_64_http'
dhcp.@boot[29]=boot
dhcp.@boot[29].filename='RISC-V_128.efi'
dhcp.@boot[29].dhcp_option='option:client-arch,29'
dhcp.@boot[29].networkid='RISC-V_128'
dhcp.@boot[30]=boot
dhcp.@boot[30].filename='RISC-V_128_http.efi'
dhcp.@boot[30].dhcp_option='option:client-arch,30'
dhcp.@boot[30].networkid='RISC-V_128_http'
dhcp.@boot[31]=boot
dhcp.@boot[31].filename='s390_Basic.efi'
dhcp.@boot[31].dhcp_option='option:client-arch,31'
dhcp.@boot[31].networkid='s390_Basic'
dhcp.@boot[32]=boot
dhcp.@boot[32].filename='s390_Extended.efi'
dhcp.@boot[32].dhcp_option='option:client-arch,32'
dhcp.@boot[32].networkid='s390_Extended'
dhcp.@boot[33]=boot
dhcp.@boot[33].filename='MIPS_32.efi'
dhcp.@boot[33].dhcp_option='option:client-arch,33'
dhcp.@boot[33].networkid='MIPS_32'
dhcp.@boot[34]=boot
dhcp.@boot[34].filename='MIPS_64.efi'
dhcp.@boot[34].dhcp_option='option:client-arch,34'
dhcp.@boot[34].networkid='MIPS_64'
dhcp.@boot[35]=boot
dhcp.@boot[35].filename='Sunway_32.efi'
dhcp.@boot[35].dhcp_option='option:client-arch,35'
dhcp.@boot[35].networkid='Sunway_32'
dhcp.@boot[36]=boot
dhcp.@boot[36].filename='Sunway_64.efi'
dhcp.@boot[36].dhcp_option='option:client-arch,36'
dhcp.@boot[36].networkid='Sunway_64'
dhcp.@boot[37]=boot
dhcp.@boot[37].filename='LoongArch_32.efi'
dhcp.@boot[37].dhcp_option='option:client-arch,37'
dhcp.@boot[37].networkid='LoongArch_32'
dhcp.@boot[38]=boot
dhcp.@boot[38].filename='LoongArch_32_http.efi'
dhcp.@boot[38].dhcp_option='option:client-arch,38'
dhcp.@boot[38].networkid='LoongArch_32_http'
dhcp.@boot[39]=boot
dhcp.@boot[39].filename='LoongArch_64.efi'
dhcp.@boot[39].dhcp_option='option:client-arch,39'
dhcp.@boot[39].networkid='LoongArch_64'
dhcp.@boot[40]=boot
dhcp.@boot[40].filename='LoongArch_64_http.efi'
dhcp.@boot[40].dhcp_option='option:client-arch,40'
dhcp.@boot[40].networkid='LoongArch_64_http'
dhcp.@boot[41]=boot
dhcp.@boot[41].filename='arm_rpiboot.efi'
dhcp.@boot[41].dhcp_option='option:client-arch,41'
dhcp.@boot[41].networkid='arm_rpiboot'
root@router:~#

```

The actual file

```
root@router:~# cat $(find / | grep dnsmasq.conf | grep tmp)
# auto-generated config file from /etc/config/dhcp
conf-file=/etc/dnsmasq.conf
dhcp-authoritative
domain-needed
localise-queries
read-ethers
enable-ubus=dnsmasq
expand-hosts
enable-tftp
bind-dynamic
local-service
log-dhcp
cache-size=1000
edns-packet-max=1232
domain=lan
local=/lan/
addn-hosts=/tmp/hosts
dhcp-leasefile=/tmp/dhcp.leases
tftp-root=/www
resolv-file=/tmp/resolv.conf.d/resolv.conf.auto
stop-dns-rebind
rebind-localhost-ok
dhcp-broadcast=tag:needs-broadcast
conf-dir=/tmp/dnsmasq.cfg01411c.d
user=dnsmasq
group=dnsmasq


dhcp-ignore-names=tag:dhcp_bogus_hostname
conf-file=/usr/share/dnsmasq/dhcpbogushostname.conf
dhcp-boot=tag:x86_BIOS,ipxe.pxe
dhcp-option=x86_BIOS,option:client-arch,0
dhcp-boot=tag:NEC_PC98,NEC_PC98.efi
dhcp-option=NEC_PC98,option:client-arch,1
dhcp-boot=tag:Itanium,Itanium.efi
dhcp-option=Itanium,option:client-arch,2
dhcp-boot=tag:DEC_Alpha,DEC_Alpha.efi
dhcp-option=DEC_Alpha,option:client-arch,3
dhcp-boot=tag:Arc_x86,Arc_x86.efi
dhcp-option=Arc_x86,option:client-arch,4
dhcp-boot=tag:Lean_Client,Lean_Client.efi
dhcp-option=Lean_Client,option:client-arch,5
dhcp-boot=tag:UEFI_x86,ipxe.efi
dhcp-option=UEFI_x86,option:client-arch,6
dhcp-boot=tag:UEFI_x64,ipxe.efi
dhcp-option=UEFI_x64,option:client-arch,7
dhcp-boot=tag:UEFI_Xscale,UEFI_Xscale.efi
dhcp-option=UEFI_Xscale,option:client-arch,8
dhcp-boot=tag:EBC,EBC.efi
dhcp-option=EBC,option:client-arch,9
dhcp-boot=tag:ARM32_EFI,bootaa32.efi
dhcp-option=ARM32_EFI,option:client-arch,10
dhcp-boot=tag:ARM64_EFI,bootaa64.efi
dhcp-option=ARM64_EFI,option:client-arch,11
dhcp-boot=tag:PowerPC_OFW,PowerPC_OFW.efi
dhcp-option=PowerPC_OFW,option:client-arch,12
dhcp-boot=tag:PowerPC_ePAPR,PowerPC_ePAPR.efi
dhcp-option=PowerPC_ePAPR,option:client-arch,13
dhcp-boot=tag:POWER_OPAL_v3,POWER_OPAL_v3.efi
dhcp-option=POWER_OPAL_v3,option:client-arch,14
dhcp-boot=tag:UEFI_x86_http,ipxe.efi
dhcp-option=UEFI_x86_http,option:client-arch,15
dhcp-boot=tag:UEFI_x64_http,ipxe.efi
dhcp-option=UEFI_x64_http,option:client-arch,16
dhcp-boot=tag:EBC_http,EBC_http.efi
dhcp-option=EBC_http,option:client-arch,17
dhcp-boot=tag:ARM32_http,bootaa32.efi
dhcp-option=ARM32_http,option:client-arch,18
dhcp-boot=tag:ARM64_http,bootaa64.efi
dhcp-option=ARM64_http,option:client-arch,19
dhcp-boot=tag:PCAT_BIOS_http,ipxe.pxe
dhcp-option=PCAT_BIOS_http,option:client-arch,20
dhcp-boot=tag:UBoot_ARM32,UBoot_ARM32.efi
dhcp-option=UBoot_ARM32,option:client-arch,21
dhcp-boot=tag:UBoot_ARM64,UBoot_ARM64.efi
dhcp-option=UBoot_ARM64,option:client-arch,22
dhcp-boot=tag:UBoot_ARM32_http,UBoot_ARM32_http.efi
dhcp-option=UBoot_ARM32_http,option:client-arch,23
dhcp-boot=tag:UBoot_ARM64_http,UBoot_ARM64_http.efi
dhcp-option=UBoot_ARM64_http,option:client-arch,24
dhcp-boot=tag:RISC-V_32,RISC-V_32.efi
dhcp-option=RISC-V_32,option:client-arch,25
dhcp-boot=tag:RISC-V_32_http,RISC-V_32_http.efi
dhcp-option=RISC-V_32_http,option:client-arch,26
dhcp-boot=tag:RISC-V_64,RISC-V_64.efi
dhcp-option=RISC-V_64,option:client-arch,27
dhcp-boot=tag:RISC-V_64_http,RISC-V_64_http.efi
dhcp-option=RISC-V_64_http,option:client-arch,28
dhcp-boot=tag:RISC-V_128,RISC-V_128.efi
dhcp-option=RISC-V_128,option:client-arch,29
dhcp-boot=tag:RISC-V_128_http,RISC-V_128_http.efi
dhcp-option=RISC-V_128_http,option:client-arch,30
dhcp-boot=tag:s390_Basic,s390_Basic.efi
dhcp-option=s390_Basic,option:client-arch,31
dhcp-boot=tag:s390_Extended,s390_Extended.efi
dhcp-option=s390_Extended,option:client-arch,32
dhcp-boot=tag:MIPS_32,MIPS_32.efi
dhcp-option=MIPS_32,option:client-arch,33
dhcp-boot=tag:MIPS_64,MIPS_64.efi
dhcp-option=MIPS_64,option:client-arch,34
dhcp-boot=tag:Sunway_32,Sunway_32.efi
dhcp-option=Sunway_32,option:client-arch,35
dhcp-boot=tag:Sunway_64,Sunway_64.efi
dhcp-option=Sunway_64,option:client-arch,36
dhcp-boot=tag:LoongArch_32,LoongArch_32.efi
dhcp-option=LoongArch_32,option:client-arch,37
dhcp-boot=tag:LoongArch_32_http,LoongArch_32_http.efi
dhcp-option=LoongArch_32_http,option:client-arch,38
dhcp-boot=tag:LoongArch_64,LoongArch_64.efi
dhcp-option=LoongArch_64,option:client-arch,39
dhcp-boot=tag:LoongArch_64_http,LoongArch_64_http.efi
dhcp-option=LoongArch_64_http,option:client-arch,40
dhcp-boot=tag:arm_rpiboot,arm_rpiboot.efi
dhcp-option=arm_rpiboot,option:client-arch,41


bogus-priv
conf-file=/usr/share/dnsmasq/rfc6761.conf
dhcp-range=set:lan,10.0.0.100,10.0.0.249,255.255.0.0,12h
no-dhcp-interface=wan


root@router:~#

```

I’ll finish this tomorrow

-------------------------

shodanx | 2026-01-06 14:38:19 UTC | #19

Ok back at it,

Please sign my petition

https://github.com/ipxe/ipxe/discussions/1583


Ok, 

I’m not sure how off topic we are from tags …

If I don’t set a dhcp_boot, the client to not request a file

dhcp.@dnsmasq\[0\].dhcp_boot='badfile.efi'

So that points to an issue with the options

This is known to work

```
dhcp-match=set:x86-legacy,option:client-arch,0
dhcp-match=set:x86_64-uefi,option:client-arch,7
dhcp-boot=tag:x86-legacy,ipxe.x86.undionly.kpxe,router.lan,192.168.1.1
dhcp-boot=tag:x86-uefi,ipxe.x86.efi,router.lan,192.168.1.1
```

And this is what it looks like in the PXE/TFTP tab

![image|690x445](upload://egcQLH3tde1ciXmOtkiO4wx2oar.png)

But in the dnsmasq actual temp config file, we see

```
dhcp-boot=tag:x86_BIOS,ipxe.pxe
dhcp-option=x86_BIOS,option:client-arch,0
dhcp-boot=tag:UEFI_x64,ipxe.efi
dhcp-option=UEFI_x64,option:client-arch,7
```

Here is full uci show dhcp

```
dhcp.@dnsmasq[0]=dnsmasq
dhcp.@dnsmasq[0].domainneeded='1'
dhcp.@dnsmasq[0].boguspriv='1'
dhcp.@dnsmasq[0].filterwin2k='0'
dhcp.@dnsmasq[0].localise_queries='1'
dhcp.@dnsmasq[0].rebind_protection='1'
dhcp.@dnsmasq[0].rebind_localhost='1'
dhcp.@dnsmasq[0].local='/lan/'
dhcp.@dnsmasq[0].domain='lan'
dhcp.@dnsmasq[0].expandhosts='1'
dhcp.@dnsmasq[0].nonegcache='0'
dhcp.@dnsmasq[0].cachesize='1000'
dhcp.@dnsmasq[0].authoritative='1'
dhcp.@dnsmasq[0].readethers='1'
dhcp.@dnsmasq[0].leasefile='/tmp/dhcp.leases'
dhcp.@dnsmasq[0].resolvfile='/tmp/resolv.conf.d/resolv.conf.auto'
dhcp.@dnsmasq[0].localservice='1'
dhcp.@dnsmasq[0].ednspacket_max='1232'
dhcp.@dnsmasq[0].filter_aaaa='0'
dhcp.@dnsmasq[0].filter_a='0'
dhcp.@dnsmasq[0].enable_tftp='1'
dhcp.@dnsmasq[0].tftp_root='/www'
dhcp.@dnsmasq[0].logdhcp='1'
dhcp.@dnsmasq[0].dhcp_boot='badfile.efi'
dhcp.lan=dhcp
dhcp.lan.interface='lan'
dhcp.lan.start='100'
dhcp.lan.limit='150'
dhcp.lan.leasetime='12h'
dhcp.lan.dhcpv4='server'
dhcp.lan.dhcpv6='disabled'
dhcp.lan.ra='disabled'
dhcp.lan.ra_slaac='1'
dhcp.lan.ra_flags='managed-config' 'other-config'
dhcp.lan.ndp='disabled'
dhcp.wan=dhcp
dhcp.wan.interface='wan'
dhcp.wan.ignore='1'
dhcp.odhcpd=odhcpd
dhcp.odhcpd.leasefile='/tmp/odhcpd.leases'
dhcp.odhcpd.leasetrigger='/usr/sbin/odhcpd-update'
dhcp.odhcpd.loglevel='4'
dhcp.odhcpd.piodir='/tmp/odhcpd-piodir'
dhcp.odhcpd.hostsdir='/tmp/hosts'
dhcp.@boot[0]=boot
dhcp.@boot[0].filename='ipxe.pxe'
dhcp.@boot[0].dhcp_option='option:client-arch,0'
dhcp.@boot[0].networkid='x86_BIOS'
dhcp.@boot[1]=boot
dhcp.@boot[1].filename='NEC_PC98.efi'
dhcp.@boot[1].dhcp_option='option:client-arch,1'
dhcp.@boot[1].networkid='NEC_PC98'
dhcp.@boot[2]=boot
dhcp.@boot[2].filename='Itanium.efi'
dhcp.@boot[2].dhcp_option='option:client-arch,2'
dhcp.@boot[2].networkid='Itanium'
dhcp.@boot[3]=boot
dhcp.@boot[3].filename='DEC_Alpha.efi'
dhcp.@boot[3].dhcp_option='option:client-arch,3'
dhcp.@boot[3].networkid='DEC_Alpha'
dhcp.@boot[4]=boot
dhcp.@boot[4].filename='Arc_x86.efi'
dhcp.@boot[4].dhcp_option='option:client-arch,4'
dhcp.@boot[4].networkid='Arc_x86'
dhcp.@boot[5]=boot
dhcp.@boot[5].filename='Lean_Client.efi'
dhcp.@boot[5].dhcp_option='option:client-arch,5'
dhcp.@boot[5].networkid='Lean_Client'
dhcp.@boot[6]=boot
dhcp.@boot[6].filename='ipxe.efi'
dhcp.@boot[6].dhcp_option='option:client-arch,6'
dhcp.@boot[6].networkid='UEFI_x86'
dhcp.@boot[7]=boot
dhcp.@boot[7].filename='ipxe.efi'
dhcp.@boot[7].dhcp_option='option:client-arch,7'
dhcp.@boot[7].networkid='UEFI_x64'
dhcp.@boot[8]=boot
dhcp.@boot[8].filename='UEFI_Xscale.efi'
dhcp.@boot[8].dhcp_option='option:client-arch,8'
dhcp.@boot[8].networkid='UEFI_Xscale'
dhcp.@boot[9]=boot
dhcp.@boot[9].filename='EBC.efi'
dhcp.@boot[9].dhcp_option='option:client-arch,9'
dhcp.@boot[9].networkid='EBC'
dhcp.@boot[10]=boot
dhcp.@boot[10].filename='bootaa32.efi'
dhcp.@boot[10].dhcp_option='option:client-arch,10'
dhcp.@boot[10].networkid='ARM32_EFI'
dhcp.@boot[11]=boot
dhcp.@boot[11].filename='bootaa64.efi'
dhcp.@boot[11].dhcp_option='option:client-arch,11'
dhcp.@boot[11].networkid='ARM64_EFI'
dhcp.@boot[12]=boot
dhcp.@boot[12].filename='PowerPC_OFW.efi'
dhcp.@boot[12].dhcp_option='option:client-arch,12'
dhcp.@boot[12].networkid='PowerPC_OFW'
dhcp.@boot[13]=boot
dhcp.@boot[13].filename='PowerPC_ePAPR.efi'
dhcp.@boot[13].dhcp_option='option:client-arch,13'
dhcp.@boot[13].networkid='PowerPC_ePAPR'
dhcp.@boot[14]=boot
dhcp.@boot[14].filename='POWER_OPAL_v3.efi'
dhcp.@boot[14].dhcp_option='option:client-arch,14'
dhcp.@boot[14].networkid='POWER_OPAL_v3'
dhcp.@boot[15]=boot
dhcp.@boot[15].filename='ipxe.efi'
dhcp.@boot[15].dhcp_option='option:client-arch,15'
dhcp.@boot[15].networkid='UEFI_x86_http'
dhcp.@boot[16]=boot
dhcp.@boot[16].filename='ipxe.efi'
dhcp.@boot[16].dhcp_option='option:client-arch,16'
dhcp.@boot[16].networkid='UEFI_x64_http'
dhcp.@boot[17]=boot
dhcp.@boot[17].filename='EBC_http.efi'
dhcp.@boot[17].dhcp_option='option:client-arch,17'
dhcp.@boot[17].networkid='EBC_http'
dhcp.@boot[18]=boot
dhcp.@boot[18].filename='bootaa32.efi'
dhcp.@boot[18].dhcp_option='option:client-arch,18'
dhcp.@boot[18].networkid='ARM32_http'
dhcp.@boot[19]=boot
dhcp.@boot[19].filename='bootaa64.efi'
dhcp.@boot[19].dhcp_option='option:client-arch,19'
dhcp.@boot[19].networkid='ARM64_http'
dhcp.@boot[20]=boot
dhcp.@boot[20].filename='ipxe.pxe'
dhcp.@boot[20].dhcp_option='option:client-arch,20'
dhcp.@boot[20].networkid='PCAT_BIOS_http'
dhcp.@boot[21]=boot
dhcp.@boot[21].filename='UBoot_ARM32.efi'
dhcp.@boot[21].dhcp_option='option:client-arch,21'
dhcp.@boot[21].networkid='UBoot_ARM32'
dhcp.@boot[22]=boot
dhcp.@boot[22].filename='UBoot_ARM64.efi'
dhcp.@boot[22].dhcp_option='option:client-arch,22'
dhcp.@boot[22].networkid='UBoot_ARM64'
dhcp.@boot[23]=boot
dhcp.@boot[23].filename='UBoot_ARM32_http.efi'
dhcp.@boot[23].dhcp_option='option:client-arch,23'
dhcp.@boot[23].networkid='UBoot_ARM32_http'
dhcp.@boot[24]=boot
dhcp.@boot[24].filename='UBoot_ARM64_http.efi'
dhcp.@boot[24].dhcp_option='option:client-arch,24'
dhcp.@boot[24].networkid='UBoot_ARM64_http'
dhcp.@boot[25]=boot
dhcp.@boot[25].filename='RISC-V_32.efi'
dhcp.@boot[25].dhcp_option='option:client-arch,25'
dhcp.@boot[25].networkid='RISC-V_32'
dhcp.@boot[26]=boot
dhcp.@boot[26].filename='RISC-V_32_http.efi'
dhcp.@boot[26].dhcp_option='option:client-arch,26'
dhcp.@boot[26].networkid='RISC-V_32_http'
dhcp.@boot[27]=boot
dhcp.@boot[27].filename='RISC-V_64.efi'
dhcp.@boot[27].dhcp_option='option:client-arch,27'
dhcp.@boot[27].networkid='RISC-V_64'
dhcp.@boot[28]=boot
dhcp.@boot[28].filename='RISC-V_64_http.efi'
dhcp.@boot[28].dhcp_option='option:client-arch,28'
dhcp.@boot[28].networkid='RISC-V_64_http'
dhcp.@boot[29]=boot
dhcp.@boot[29].filename='RISC-V_128.efi'
dhcp.@boot[29].dhcp_option='option:client-arch,29'
dhcp.@boot[29].networkid='RISC-V_128'
dhcp.@boot[30]=boot
dhcp.@boot[30].filename='RISC-V_128_http.efi'
dhcp.@boot[30].dhcp_option='option:client-arch,30'
dhcp.@boot[30].networkid='RISC-V_128_http'
dhcp.@boot[31]=boot
dhcp.@boot[31].filename='s390_Basic.efi'
dhcp.@boot[31].dhcp_option='option:client-arch,31'
dhcp.@boot[31].networkid='s390_Basic'
dhcp.@boot[32]=boot
dhcp.@boot[32].filename='s390_Extended.efi'
dhcp.@boot[32].dhcp_option='option:client-arch,32'
dhcp.@boot[32].networkid='s390_Extended'
dhcp.@boot[33]=boot
dhcp.@boot[33].filename='MIPS_32.efi'
dhcp.@boot[33].dhcp_option='option:client-arch,33'
dhcp.@boot[33].networkid='MIPS_32'
dhcp.@boot[34]=boot
dhcp.@boot[34].filename='MIPS_64.efi'
dhcp.@boot[34].dhcp_option='option:client-arch,34'
dhcp.@boot[34].networkid='MIPS_64'
dhcp.@boot[35]=boot
dhcp.@boot[35].filename='Sunway_32.efi'
dhcp.@boot[35].dhcp_option='option:client-arch,35'
dhcp.@boot[35].networkid='Sunway_32'
dhcp.@boot[36]=boot
dhcp.@boot[36].filename='Sunway_64.efi'
dhcp.@boot[36].dhcp_option='option:client-arch,36'
dhcp.@boot[36].networkid='Sunway_64'
dhcp.@boot[37]=boot
dhcp.@boot[37].filename='LoongArch_32.efi'
dhcp.@boot[37].dhcp_option='option:client-arch,37'
dhcp.@boot[37].networkid='LoongArch_32'
dhcp.@boot[38]=boot
dhcp.@boot[38].filename='LoongArch_32_http.efi'
dhcp.@boot[38].dhcp_option='option:client-arch,38'
dhcp.@boot[38].networkid='LoongArch_32_http'
dhcp.@boot[39]=boot
dhcp.@boot[39].filename='LoongArch_64.efi'
dhcp.@boot[39].dhcp_option='option:client-arch,39'
dhcp.@boot[39].networkid='LoongArch_64'
dhcp.@boot[40]=boot
dhcp.@boot[40].filename='LoongArch_64_http.efi'
dhcp.@boot[40].dhcp_option='option:client-arch,40'
dhcp.@boot[40].networkid='LoongArch_64_http'
dhcp.@boot[41]=boot
dhcp.@boot[41].filename='arm_rpiboot.efi'
dhcp.@boot[41].dhcp_option='option:client-arch,41'
dhcp.@boot[41].networkid='arm_rpiboot'
```

Here is the tmp config file this produces

```
# auto-generated config file from /etc/config/dhcp
conf-file=/etc/dnsmasq.conf
dhcp-authoritative
domain-needed
localise-queries
read-ethers
enable-ubus=dnsmasq
expand-hosts
enable-tftp
bind-dynamic
local-service
log-dhcp
cache-size=1000
edns-packet-max=1232
domain=lan
local=/lan/
addn-hosts=/tmp/hosts
dhcp-leasefile=/tmp/dhcp.leases
tftp-root=/www
dhcp-boot=badfile.efi
resolv-file=/tmp/resolv.conf.d/resolv.conf.auto
stop-dns-rebind
rebind-localhost-ok
dhcp-broadcast=tag:needs-broadcast
conf-dir=/tmp/dnsmasq.cfg01411c.d
user=dnsmasq
group=dnsmasq

dhcp-ignore-names=tag:dhcp_bogus_hostname
conf-file=/usr/share/dnsmasq/dhcpbogushostname.conf
dhcp-boot=tag:x86_BIOS,ipxe.pxe
dhcp-option=x86_BIOS,option:client-arch,0
dhcp-boot=tag:NEC_PC98,NEC_PC98.efi
dhcp-option=NEC_PC98,option:client-arch,1
dhcp-boot=tag:Itanium,Itanium.efi
dhcp-option=Itanium,option:client-arch,2
dhcp-boot=tag:DEC_Alpha,DEC_Alpha.efi
dhcp-option=DEC_Alpha,option:client-arch,3
dhcp-boot=tag:Arc_x86,Arc_x86.efi
dhcp-option=Arc_x86,option:client-arch,4
dhcp-boot=tag:Lean_Client,Lean_Client.efi
dhcp-option=Lean_Client,option:client-arch,5
dhcp-boot=tag:UEFI_x86,ipxe.efi
dhcp-option=UEFI_x86,option:client-arch,6
dhcp-boot=tag:UEFI_x64,ipxe.efi
dhcp-option=UEFI_x64,option:client-arch,7
dhcp-boot=tag:UEFI_Xscale,UEFI_Xscale.efi
dhcp-option=UEFI_Xscale,option:client-arch,8
dhcp-boot=tag:EBC,EBC.efi
dhcp-option=EBC,option:client-arch,9
dhcp-boot=tag:ARM32_EFI,bootaa32.efi
dhcp-option=ARM32_EFI,option:client-arch,10
dhcp-boot=tag:ARM64_EFI,bootaa64.efi
dhcp-option=ARM64_EFI,option:client-arch,11
dhcp-boot=tag:PowerPC_OFW,PowerPC_OFW.efi
dhcp-option=PowerPC_OFW,option:client-arch,12
dhcp-boot=tag:PowerPC_ePAPR,PowerPC_ePAPR.efi
dhcp-option=PowerPC_ePAPR,option:client-arch,13
dhcp-boot=tag:POWER_OPAL_v3,POWER_OPAL_v3.efi
dhcp-option=POWER_OPAL_v3,option:client-arch,14
dhcp-boot=tag:UEFI_x86_http,ipxe.efi
dhcp-option=UEFI_x86_http,option:client-arch,15
dhcp-boot=tag:UEFI_x64_http,ipxe.efi
dhcp-option=UEFI_x64_http,option:client-arch,16
dhcp-boot=tag:EBC_http,EBC_http.efi
dhcp-option=EBC_http,option:client-arch,17
dhcp-boot=tag:ARM32_http,bootaa32.efi
dhcp-option=ARM32_http,option:client-arch,18
dhcp-boot=tag:ARM64_http,bootaa64.efi
dhcp-option=ARM64_http,option:client-arch,19
dhcp-boot=tag:PCAT_BIOS_http,ipxe.pxe
dhcp-option=PCAT_BIOS_http,option:client-arch,20
dhcp-boot=tag:UBoot_ARM32,UBoot_ARM32.efi
dhcp-option=UBoot_ARM32,option:client-arch,21
dhcp-boot=tag:UBoot_ARM64,UBoot_ARM64.efi
dhcp-option=UBoot_ARM64,option:client-arch,22
dhcp-boot=tag:UBoot_ARM32_http,UBoot_ARM32_http.efi
dhcp-option=UBoot_ARM32_http,option:client-arch,23
dhcp-boot=tag:UBoot_ARM64_http,UBoot_ARM64_http.efi
dhcp-option=UBoot_ARM64_http,option:client-arch,24
dhcp-boot=tag:RISC-V_32,RISC-V_32.efi
dhcp-option=RISC-V_32,option:client-arch,25
dhcp-boot=tag:RISC-V_32_http,RISC-V_32_http.efi
dhcp-option=RISC-V_32_http,option:client-arch,26
dhcp-boot=tag:RISC-V_64,RISC-V_64.efi
dhcp-option=RISC-V_64,option:client-arch,27
dhcp-boot=tag:RISC-V_64_http,RISC-V_64_http.efi
dhcp-option=RISC-V_64_http,option:client-arch,28
dhcp-boot=tag:RISC-V_128,RISC-V_128.efi
dhcp-option=RISC-V_128,option:client-arch,29
dhcp-boot=tag:RISC-V_128_http,RISC-V_128_http.efi
dhcp-option=RISC-V_128_http,option:client-arch,30
dhcp-boot=tag:s390_Basic,s390_Basic.efi
dhcp-option=s390_Basic,option:client-arch,31
dhcp-boot=tag:s390_Extended,s390_Extended.efi
dhcp-option=s390_Extended,option:client-arch,32
dhcp-boot=tag:MIPS_32,MIPS_32.efi
dhcp-option=MIPS_32,option:client-arch,33
dhcp-boot=tag:MIPS_64,MIPS_64.efi
dhcp-option=MIPS_64,option:client-arch,34
dhcp-boot=tag:Sunway_32,Sunway_32.efi
dhcp-option=Sunway_32,option:client-arch,35
dhcp-boot=tag:Sunway_64,Sunway_64.efi
dhcp-option=Sunway_64,option:client-arch,36
dhcp-boot=tag:LoongArch_32,LoongArch_32.efi
dhcp-option=LoongArch_32,option:client-arch,37
dhcp-boot=tag:LoongArch_32_http,LoongArch_32_http.efi
dhcp-option=LoongArch_32_http,option:client-arch,38
dhcp-boot=tag:LoongArch_64,LoongArch_64.efi
dhcp-option=LoongArch_64,option:client-arch,39
dhcp-boot=tag:LoongArch_64_http,LoongArch_64_http.efi
dhcp-option=LoongArch_64_http,option:client-arch,40
dhcp-boot=tag:arm_rpiboot,arm_rpiboot.efi
dhcp-option=arm_rpiboot,option:client-arch,41

bogus-priv
conf-file=/usr/share/dnsmasq/rfc6761.conf
dhcp-range=set:lan,10.0.0.100,10.0.0.249,255.255.0.0,12h
no-dhcp-interface=wan
```

Here is readlog -f of a PXE boot attempt from a x64 efi PC

```
Tue Jan  6 09:34:07 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 available DHCP range: 10.0.0.100 -- 10.0.0.249
Tue Jan  6 09:34:07 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 vendor class: PXEClient:Arch:00007:UNDI:003016
Tue Jan  6 09:34:07 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 DHCPDISCOVER(br-lan) 1c:1b:0d:9e:9d:4e
Tue Jan  6 09:34:07 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 tags: lan, br-lan
Tue Jan  6 09:34:07 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 DHCPOFFER(br-lan) 10.0.0.117 1c:1b:0d:9e:9d:4e
Tue Jan  6 09:34:07 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 requested options: 1:netmask, 2:time-offset, 3:router, 4, 5,
Tue Jan  6 09:34:07 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 requested options: 6:dns-server, 12:hostname, 13:boot-file-size,
Tue Jan  6 09:34:07 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 requested options: 15:domain-name, 17:root-path, 18:extension-path,
Tue Jan  6 09:34:07 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 requested options: 22:max-datagram-reassembly, 23:default-ttl,
Tue Jan  6 09:34:07 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 requested options: 28:broadcast, 40:nis-domain, 41:nis-server,
Tue Jan  6 09:34:07 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 requested options: 42:ntp-server, 43:vendor-encap, 50:requested-address,
Tue Jan  6 09:34:07 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 requested options: 51:lease-time, 54:server-identifier, 58:T1,
Tue Jan  6 09:34:07 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 requested options: 59:T2, 60:vendor-class, 66:tftp-server, 67:bootfile-name,
Tue Jan  6 09:34:07 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 requested options: 97:client-machine-id, 128, 129, 130, 131,
Tue Jan  6 09:34:07 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 requested options: 132, 133, 134, 135
Tue Jan  6 09:34:07 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 next server: 10.0.0.1
Tue Jan  6 09:34:07 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 broadcast response
Tue Jan  6 09:34:07 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 sent size:  1 option: 53 message-type  2
Tue Jan  6 09:34:07 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 sent size:  4 option: 54 server-identifier  10.0.0.1
Tue Jan  6 09:34:07 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 sent size:  4 option: 51 lease-time  12h
Tue Jan  6 09:34:07 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 sent size: 12 option: 67 bootfile-name  badfile.efi
Tue Jan  6 09:34:07 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 sent size:  4 option: 58 T1  6h
Tue Jan  6 09:34:07 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 sent size:  4 option: 59 T2  10h30m
Tue Jan  6 09:34:07 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 sent size:  4 option:  1 netmask  255.255.0.0
Tue Jan  6 09:34:07 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 sent size:  4 option: 28 broadcast  10.0.255.255
Tue Jan  6 09:34:07 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 sent size:  4 option:  3 router  10.0.0.1
Tue Jan  6 09:34:07 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 sent size:  4 option:  6 dns-server  10.0.0.1
Tue Jan  6 09:34:07 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 sent size:  3 option: 15 domain-name  lan
Tue Jan  6 09:34:10 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 available DHCP range: 10.0.0.100 -- 10.0.0.249
Tue Jan  6 09:34:10 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 vendor class: PXEClient:Arch:00007:UNDI:003016
Tue Jan  6 09:34:10 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 DHCPREQUEST(br-lan) 10.0.0.117 1c:1b:0d:9e:9d:4e
Tue Jan  6 09:34:10 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 tags: lan, br-lan
Tue Jan  6 09:34:10 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 DHCPACK(br-lan) 10.0.0.117 1c:1b:0d:9e:9d:4e
Tue Jan  6 09:34:10 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 requested options: 1:netmask, 2:time-offset, 3:router, 4, 5,
Tue Jan  6 09:34:10 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 requested options: 6:dns-server, 12:hostname, 13:boot-file-size,
Tue Jan  6 09:34:10 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 requested options: 15:domain-name, 17:root-path, 18:extension-path,
Tue Jan  6 09:34:10 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 requested options: 22:max-datagram-reassembly, 23:default-ttl,
Tue Jan  6 09:34:10 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 requested options: 28:broadcast, 40:nis-domain, 41:nis-server,
Tue Jan  6 09:34:10 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 requested options: 42:ntp-server, 43:vendor-encap, 50:requested-address,
Tue Jan  6 09:34:10 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 requested options: 51:lease-time, 54:server-identifier, 58:T1,
Tue Jan  6 09:34:10 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 requested options: 59:T2, 60:vendor-class, 66:tftp-server, 67:bootfile-name,
Tue Jan  6 09:34:10 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 requested options: 97:client-machine-id, 128, 129, 130, 131,
Tue Jan  6 09:34:10 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 requested options: 132, 133, 134, 135
Tue Jan  6 09:34:10 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 next server: 10.0.0.1
Tue Jan  6 09:34:10 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 broadcast response
Tue Jan  6 09:34:10 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 sent size:  1 option: 53 message-type  5
Tue Jan  6 09:34:10 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 sent size:  4 option: 54 server-identifier  10.0.0.1
Tue Jan  6 09:34:10 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 sent size:  4 option: 51 lease-time  12h
Tue Jan  6 09:34:10 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 sent size: 12 option: 67 bootfile-name  badfile.efi
Tue Jan  6 09:34:10 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 sent size:  4 option: 58 T1  6h
Tue Jan  6 09:34:10 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 sent size:  4 option: 59 T2  10h30m
Tue Jan  6 09:34:10 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 sent size:  4 option:  1 netmask  255.255.0.0
Tue Jan  6 09:34:10 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 sent size:  4 option: 28 broadcast  10.0.255.255
Tue Jan  6 09:34:10 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 sent size:  4 option:  3 router  10.0.0.1
Tue Jan  6 09:34:10 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 sent size:  4 option:  6 dns-server  10.0.0.1
Tue Jan  6 09:34:10 2026 daemon.info dnsmasq-dhcp[1]: 1133326932 sent size:  3 option: 15 domain-name  lan
Tue Jan  6 09:34:10 2026 daemon.err dnsmasq-tftp[1]: error 8 User aborted the transfer received from 10.0.0.117
Tue Jan  6 09:34:10 2026 daemon.info dnsmasq-tftp[1]: sent /www/badfile.efi to 10.0.0.117
Tue Jan  6 09:34:10 2026 daemon.info dnsmasq-tftp[1]: sent /www/badfile.efi to 10.0.0.117
```

And here is 

tcpdump -i br-lan port 67 or port 68 -n -vvv

```
09:34:07.166775 IP (tos 0x0, ttl 64, id 53532, offset 0, flags [none], proto UDP (17), length 375)
    0.0.0.0.68 > 255.255.255.255.67: [udp sum ok] BOOTP/DHCP, Request from 1c:1b:0d:9e:9d:4e, length 347, xid 0x438d3254, Flags [Broadcast] (0x8000)
          Client-Ethernet-Address 1c:1b:0d:9e:9d:4e
          Vendor-rfc1048 Extensions
            Magic Cookie 0x63825363
            DHCP-Message (53), length 1: Discover
            MSZ (57), length 2: 1472
            Parameter-Request (55), length 35:
              Subnet-Mask (1), Time-Zone (2), Default-Gateway (3), Time-Server (4)
              IEN-Name-Server (5), Domain-Name-Server (6), Hostname (12), BS (13)
              Domain-Name (15), RP (17), EP (18), RSZ (22)
              TTL (23), BR (28), YD (40), YS (41)
              NTP (42), Vendor-Option (43), Requested-IP (50), Lease-Time (51)
              Server-ID (54), RN (58), RB (59), Vendor-Class (60)
              TFTP (66), BF (67), GUID (97), Unknown (128)
              Unknown (129), Unknown (130), Unknown (131), Unknown (132)
              Unknown (133), Unknown (134), Unknown (135)
            GUID (97), length 17: 0.28.2.27.3.13.4.158.5.157.6.80.7.0.8.0.9
            NDI (94), length 3: 1.3.16
            ARCH (93), length 2: 7
            Vendor-Class (60), length 32: "PXEClient:Arch:00007:UNDI:003016"
            END (255), length 0
09:34:07.178432 IP (tos 0xc0, ttl 64, id 2862, offset 0, flags [none], proto UDP (17), length 339)
    10.0.0.1.67 > 255.255.255.255.68: [bad udp cksum 0x0b51 -> 0x0453!] BOOTP/DHCP, Reply, length 311, xid 0x438d3254, Flags [Broadcast] (0x8000)
          Your-IP 10.0.0.117
          Server-IP 10.0.0.1
          Client-Ethernet-Address 1c:1b:0d:9e:9d:4e
          Vendor-rfc1048 Extensions
            Magic Cookie 0x63825363
            DHCP-Message (53), length 1: Offer
            Server-ID (54), length 4: 10.0.0.1
            Lease-Time (51), length 4: 43200
            BF (67), length 12: "badfile.efi^@"
            RN (58), length 4: 21600
            RB (59), length 4: 37800
            Subnet-Mask (1), length 4: 255.255.0.0
            BR (28), length 4: 10.0.255.255
            Default-Gateway (3), length 4: 10.0.0.1
            Domain-Name-Server (6), length 4: 10.0.0.1
            Domain-Name (15), length 3: "lan"
            END (255), length 0
09:34:10.200071 IP (tos 0x0, ttl 64, id 53533, offset 0, flags [none], proto UDP (17), length 387)
    0.0.0.0.68 > 255.255.255.255.67: [udp sum ok] BOOTP/DHCP, Request from 1c:1b:0d:9e:9d:4e, length 359, xid 0x438d3254, Flags [Broadcast] (0x8000)
          Client-Ethernet-Address 1c:1b:0d:9e:9d:4e
          Vendor-rfc1048 Extensions
            Magic Cookie 0x63825363
            DHCP-Message (53), length 1: Request
            Server-ID (54), length 4: 10.0.0.1
            Requested-IP (50), length 4: 10.0.0.117
            MSZ (57), length 2: 65280
            Parameter-Request (55), length 35:
              Subnet-Mask (1), Time-Zone (2), Default-Gateway (3), Time-Server (4)
              IEN-Name-Server (5), Domain-Name-Server (6), Hostname (12), BS (13)
              Domain-Name (15), RP (17), EP (18), RSZ (22)
              TTL (23), BR (28), YD (40), YS (41)
              NTP (42), Vendor-Option (43), Requested-IP (50), Lease-Time (51)
              Server-ID (54), RN (58), RB (59), Vendor-Class (60)
              TFTP (66), BF (67), GUID (97), Unknown (128)
              Unknown (129), Unknown (130), Unknown (131), Unknown (132)
              Unknown (133), Unknown (134), Unknown (135)
            GUID (97), length 17: 0.28.2.27.3.13.4.158.5.157.6.80.7.0.8.0.9
            NDI (94), length 3: 1.3.16
            ARCH (93), length 2: 7
            Vendor-Class (60), length 32: "PXEClient:Arch:00007:UNDI:003016"
            END (255), length 0
09:34:10.217100 IP (tos 0xc0, ttl 64, id 2874, offset 0, flags [none], proto UDP (17), length 339)
    10.0.0.1.67 > 255.255.255.255.68: [bad udp cksum 0x0b51 -> 0x0153!] BOOTP/DHCP, Reply, length 311, xid 0x438d3254, Flags [Broadcast] (0x8000)
          Your-IP 10.0.0.117
          Server-IP 10.0.0.1
          Client-Ethernet-Address 1c:1b:0d:9e:9d:4e
          Vendor-rfc1048 Extensions
            Magic Cookie 0x63825363
            DHCP-Message (53), length 1: ACK
            Server-ID (54), length 4: 10.0.0.1
            Lease-Time (51), length 4: 43200
            BF (67), length 12: "badfile.efi^@"
            RN (58), length 4: 21600
            RB (59), length 4: 37800
            Subnet-Mask (1), length 4: 255.255.0.0
            BR (28), length 4: 10.0.255.255
            Default-Gateway (3), length 4: 10.0.0.1
            Domain-Name-Server (6), length 4: 10.0.0.1
            Domain-Name (15), length 3: "lan"
            END (255), length 0

```

So, 

Without the directive

```
dhcp.@dnsmasq[0].dhcp_boot='badfile.efi'
```

```
dhcp-boot=badfile.efi
```

Then the client does not request a file at all

Unless I have my syntax wrong, and I think I don’t

This indicates a bug in the PXE/TFTP system

I believe this should use match tag as well here, not dhcp-option 

In the next message, I will implement client arch matching via the Match Tag tab

And see if that helps

-------------------------

shodanx | 2026-01-06 14:51:06 UTC | #20

Ok, so, first, I was wrong, this is happening in “Set Tab” not match

![image|401x126](upload://kvAJb6sdb8y7OY2b25hrkVvO7Wr.png)

My first attempt failed

![image|690x112](upload://j53Q88bB4rEgDqeuPGfwbAmZ3Yc.png)

![image|414x219](upload://ctKZPFqy7Edy4wkuUopZsmAN8bc.png)

This is because the prefix option:

Is still needed here.

I think you always have to start with “option:”

So maybe luci could automatically add it when it’s needed

And not add it when it’s not needed ?

![image|690x50](upload://68EHI9dU6tKuMC9MHjOgdI3oPJL.png)

So I implemented the correction

This will be a trap for users to fall into for now

![image|690x88](upload://dRdjMeNwIy1OiIXkR9sKZwJUSK1.png)

![image|507x287](upload://ah5h0DcEgxrFSG9I1lh2vzoYKXN.png)

And I remove the dhcp options from the PXE/TFTP tabs

```
uci del dhcp.cfg05b399.dhcp_option

uci del dhcp.cfg0cb399.dhcp_option
```

logread output

```
Tue Jan  6 09:49:59 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 available DHCP range: 10.0.0.100 -- 10.0.0.249
Tue Jan  6 09:49:59 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 vendor class: PXEClient:Arch:00007:UNDI:003016
Tue Jan  6 09:49:59 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 DHCPDISCOVER(br-lan) 1c:1b:0d:9e:9d:4e
Tue Jan  6 09:49:59 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 tags: lan, UEFI_x64, br-lan
Tue Jan  6 09:49:59 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 DHCPOFFER(br-lan) 10.0.0.117 1c:1b:0d:9e:9d:4e
Tue Jan  6 09:49:59 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 requested options: 1:netmask, 2:time-offset, 3:router, 4, 5,
Tue Jan  6 09:49:59 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 requested options: 6:dns-server, 12:hostname, 13:boot-file-size,
Tue Jan  6 09:49:59 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 requested options: 15:domain-name, 17:root-path, 18:extension-path,
Tue Jan  6 09:49:59 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 requested options: 22:max-datagram-reassembly, 23:default-ttl,
Tue Jan  6 09:49:59 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 requested options: 28:broadcast, 40:nis-domain, 41:nis-server,
Tue Jan  6 09:49:59 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 requested options: 42:ntp-server, 43:vendor-encap, 50:requested-address,
Tue Jan  6 09:49:59 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 requested options: 51:lease-time, 54:server-identifier, 58:T1,
Tue Jan  6 09:49:59 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 requested options: 59:T2, 60:vendor-class, 66:tftp-server, 67:bootfile-name,
Tue Jan  6 09:49:59 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 requested options: 97:client-machine-id, 128, 129, 130, 131,
Tue Jan  6 09:49:59 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 requested options: 132, 133, 134, 135
Tue Jan  6 09:49:59 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 next server: 10.0.0.1
Tue Jan  6 09:49:59 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 broadcast response
Tue Jan  6 09:49:59 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 sent size:  1 option: 53 message-type  2
Tue Jan  6 09:49:59 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 sent size:  4 option: 54 server-identifier  10.0.0.1
Tue Jan  6 09:49:59 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 sent size:  4 option: 51 lease-time  12h
Tue Jan  6 09:49:59 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 sent size:  9 option: 67 bootfile-name  ipxe.efi
Tue Jan  6 09:49:59 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 sent size:  4 option: 58 T1  6h
Tue Jan  6 09:49:59 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 sent size:  4 option: 59 T2  10h30m
Tue Jan  6 09:49:59 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 sent size:  4 option:  1 netmask  255.255.0.0
Tue Jan  6 09:49:59 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 sent size:  4 option: 28 broadcast  10.0.255.255
Tue Jan  6 09:49:59 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 sent size:  4 option:  3 router  10.0.0.1
Tue Jan  6 09:49:59 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 sent size:  4 option:  6 dns-server  10.0.0.1
Tue Jan  6 09:49:59 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 sent size:  3 option: 15 domain-name  lan
Tue Jan  6 09:50:02 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 available DHCP range: 10.0.0.100 -- 10.0.0.249
Tue Jan  6 09:50:02 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 vendor class: PXEClient:Arch:00007:UNDI:003016
Tue Jan  6 09:50:02 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 DHCPREQUEST(br-lan) 10.0.0.117 1c:1b:0d:9e:9d:4e
Tue Jan  6 09:50:02 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 tags: lan, UEFI_x64, br-lan
Tue Jan  6 09:50:02 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 DHCPACK(br-lan) 10.0.0.117 1c:1b:0d:9e:9d:4e
Tue Jan  6 09:50:02 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 requested options: 1:netmask, 2:time-offset, 3:router, 4, 5,
Tue Jan  6 09:50:02 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 requested options: 6:dns-server, 12:hostname, 13:boot-file-size,
Tue Jan  6 09:50:02 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 requested options: 15:domain-name, 17:root-path, 18:extension-path,
Tue Jan  6 09:50:02 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 requested options: 22:max-datagram-reassembly, 23:default-ttl,
Tue Jan  6 09:50:02 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 requested options: 28:broadcast, 40:nis-domain, 41:nis-server,
Tue Jan  6 09:50:02 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 requested options: 42:ntp-server, 43:vendor-encap, 50:requested-address,
Tue Jan  6 09:50:02 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 requested options: 51:lease-time, 54:server-identifier, 58:T1,
Tue Jan  6 09:50:02 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 requested options: 59:T2, 60:vendor-class, 66:tftp-server, 67:bootfile-name,
Tue Jan  6 09:50:02 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 requested options: 97:client-machine-id, 128, 129, 130, 131,
Tue Jan  6 09:50:02 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 requested options: 132, 133, 134, 135
Tue Jan  6 09:50:02 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 next server: 10.0.0.1
Tue Jan  6 09:50:02 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 broadcast response
Tue Jan  6 09:50:02 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 sent size:  1 option: 53 message-type  5
Tue Jan  6 09:50:02 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 sent size:  4 option: 54 server-identifier  10.0.0.1
Tue Jan  6 09:50:02 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 sent size:  4 option: 51 lease-time  12h
Tue Jan  6 09:50:02 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 sent size:  9 option: 67 bootfile-name  ipxe.efi
Tue Jan  6 09:50:02 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 sent size:  4 option: 58 T1  6h
Tue Jan  6 09:50:02 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 sent size:  4 option: 59 T2  10h30m
Tue Jan  6 09:50:02 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 sent size:  4 option:  1 netmask  255.255.0.0
Tue Jan  6 09:50:02 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 sent size:  4 option: 28 broadcast  10.0.255.255
Tue Jan  6 09:50:02 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 sent size:  4 option:  3 router  10.0.0.1
Tue Jan  6 09:50:02 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 sent size:  4 option:  6 dns-server  10.0.0.1
Tue Jan  6 09:50:02 2026 daemon.info dnsmasq-dhcp[1]: 4014564324 sent size:  3 option: 15 domain-name  lan
Tue Jan  6 09:50:02 2026 daemon.err dnsmasq-tftp[1]: error 8 User aborted the transfer received from 10.0.0.117
Tue Jan  6 09:50:02 2026 daemon.info dnsmasq-tftp[1]: sent /www/ipxe.efi to 10.0.0.117
Tue Jan  6 09:50:03 2026 daemon.info dnsmasq-tftp[1]: sent /www/ipxe.efi to 10.0.0.117
Tue Jan  6 09:50:03 2026 daemon.info dnsmasq-tftp[1]: sent /www/autoexec.ipxe to 10.0.0.117
Tue Jan  6 09:50:03 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 available DHCP range: 10.0.0.100 -- 10.0.0.249
Tue Jan  6 09:50:03 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 vendor class: PXEClient:Arch:00007:UNDI:003010
Tue Jan  6 09:50:03 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 user class: iPXE
Tue Jan  6 09:50:03 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 DHCPDISCOVER(br-lan) 1c:1b:0d:9e:9d:4e
Tue Jan  6 09:50:03 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 tags: lan, UEFI_x64, br-lan
Tue Jan  6 09:50:03 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 DHCPOFFER(br-lan) 10.0.0.117 1c:1b:0d:9e:9d:4e
Tue Jan  6 09:50:03 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 requested options: 1:netmask, 3:router, 6:dns-server, 7:log-server,
Tue Jan  6 09:50:03 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 requested options: 12:hostname, 15:domain-name, 17:root-path,
Tue Jan  6 09:50:03 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 requested options: 26:mtu, 42:ntp-server, 43:vendor-encap, 60:vendor-class,
Tue Jan  6 09:50:03 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 requested options: 66:tftp-server, 67:bootfile-name, 119:domain-search,
Tue Jan  6 09:50:03 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 requested options: 121:classless-static-route, 128, 129, 130,
Tue Jan  6 09:50:03 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 requested options: 131, 132, 133, 134, 135, 175, 203
Tue Jan  6 09:50:03 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 next server: 10.0.0.1
Tue Jan  6 09:50:03 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 broadcast response
Tue Jan  6 09:50:03 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  1 option: 53 message-type  2
Tue Jan  6 09:50:03 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  4 option: 54 server-identifier  10.0.0.1
Tue Jan  6 09:50:03 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  4 option: 51 lease-time  12h
Tue Jan  6 09:50:03 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  9 option: 67 bootfile-name  ipxe.efi
Tue Jan  6 09:50:03 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  4 option: 58 T1  6h
Tue Jan  6 09:50:03 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  4 option: 59 T2  10h30m
Tue Jan  6 09:50:03 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  4 option:  1 netmask  255.255.0.0
Tue Jan  6 09:50:03 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  4 option: 28 broadcast  10.0.255.255
Tue Jan  6 09:50:03 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  4 option:  3 router  10.0.0.1
Tue Jan  6 09:50:03 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  4 option:  6 dns-server  10.0.0.1
Tue Jan  6 09:50:03 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  3 option: 15 domain-name  lan
Tue Jan  6 09:50:04 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 available DHCP range: 10.0.0.100 -- 10.0.0.249
Tue Jan  6 09:50:04 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 vendor class: PXEClient:Arch:00007:UNDI:003010
Tue Jan  6 09:50:04 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 user class: iPXE
Tue Jan  6 09:50:04 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 DHCPDISCOVER(br-lan) 1c:1b:0d:9e:9d:4e
Tue Jan  6 09:50:04 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 tags: lan, UEFI_x64, br-lan
Tue Jan  6 09:50:04 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 DHCPOFFER(br-lan) 10.0.0.117 1c:1b:0d:9e:9d:4e
Tue Jan  6 09:50:04 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 requested options: 1:netmask, 3:router, 6:dns-server, 7:log-server,
Tue Jan  6 09:50:04 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 requested options: 12:hostname, 15:domain-name, 17:root-path,
Tue Jan  6 09:50:04 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 requested options: 26:mtu, 42:ntp-server, 43:vendor-encap, 60:vendor-class,
Tue Jan  6 09:50:04 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 requested options: 66:tftp-server, 67:bootfile-name, 119:domain-search,
Tue Jan  6 09:50:04 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 requested options: 121:classless-static-route, 128, 129, 130,
Tue Jan  6 09:50:04 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 requested options: 131, 132, 133, 134, 135, 175, 203
Tue Jan  6 09:50:04 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 next server: 10.0.0.1
Tue Jan  6 09:50:04 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 broadcast response
Tue Jan  6 09:50:04 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  1 option: 53 message-type  2
Tue Jan  6 09:50:04 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  4 option: 54 server-identifier  10.0.0.1
Tue Jan  6 09:50:04 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  4 option: 51 lease-time  12h
Tue Jan  6 09:50:04 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  9 option: 67 bootfile-name  ipxe.efi
Tue Jan  6 09:50:04 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  4 option: 58 T1  6h
Tue Jan  6 09:50:04 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  4 option: 59 T2  10h30m
Tue Jan  6 09:50:04 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  4 option:  1 netmask  255.255.0.0
Tue Jan  6 09:50:04 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  4 option: 28 broadcast  10.0.255.255
Tue Jan  6 09:50:04 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  4 option:  3 router  10.0.0.1
Tue Jan  6 09:50:04 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  4 option:  6 dns-server  10.0.0.1
Tue Jan  6 09:50:04 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  3 option: 15 domain-name  lan
Tue Jan  6 09:50:06 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 available DHCP range: 10.0.0.100 -- 10.0.0.249
Tue Jan  6 09:50:06 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 vendor class: PXEClient:Arch:00007:UNDI:003010
Tue Jan  6 09:50:06 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 user class: iPXE
Tue Jan  6 09:50:06 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 DHCPREQUEST(br-lan) 10.0.0.117 1c:1b:0d:9e:9d:4e
Tue Jan  6 09:50:06 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 tags: lan, UEFI_x64, br-lan
Tue Jan  6 09:50:06 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 DHCPACK(br-lan) 10.0.0.117 1c:1b:0d:9e:9d:4e
Tue Jan  6 09:50:06 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 requested options: 1:netmask, 3:router, 6:dns-server, 7:log-server,
Tue Jan  6 09:50:06 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 requested options: 12:hostname, 15:domain-name, 17:root-path,
Tue Jan  6 09:50:06 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 requested options: 26:mtu, 42:ntp-server, 43:vendor-encap, 60:vendor-class,
Tue Jan  6 09:50:06 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 requested options: 66:tftp-server, 67:bootfile-name, 119:domain-search,
Tue Jan  6 09:50:06 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 requested options: 121:classless-static-route, 128, 129, 130,
Tue Jan  6 09:50:06 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 requested options: 131, 132, 133, 134, 135, 175, 203
Tue Jan  6 09:50:06 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 next server: 10.0.0.1
Tue Jan  6 09:50:06 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 broadcast response
Tue Jan  6 09:50:06 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  1 option: 53 message-type  5
Tue Jan  6 09:50:06 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  4 option: 54 server-identifier  10.0.0.1
Tue Jan  6 09:50:06 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  4 option: 51 lease-time  12h
Tue Jan  6 09:50:06 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  9 option: 67 bootfile-name  ipxe.efi
Tue Jan  6 09:50:06 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  4 option: 58 T1  6h
Tue Jan  6 09:50:06 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  4 option: 59 T2  10h30m
Tue Jan  6 09:50:06 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  4 option:  1 netmask  255.255.0.0
Tue Jan  6 09:50:06 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  4 option: 28 broadcast  10.0.255.255
Tue Jan  6 09:50:06 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  4 option:  3 router  10.0.0.1
Tue Jan  6 09:50:06 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  4 option:  6 dns-server  10.0.0.1
Tue Jan  6 09:50:06 2026 daemon.info dnsmasq-dhcp[1]: 2192490079 sent size:  3 option: 15 domain-name  lan
```

tcpdump output

```
09:49:59.128714 IP (tos 0x0, ttl 64, id 35173, offset 0, flags [none], proto UDP (17), length 375)
    0.0.0.0.68 > 255.255.255.255.67: [udp sum ok] BOOTP/DHCP, Request from 1c:1b:0d:9e:9d:4e, length 347, xid 0xef4963e4, Flags [Broadcast] (0x8000)
          Client-Ethernet-Address 1c:1b:0d:9e:9d:4e
          Vendor-rfc1048 Extensions
            Magic Cookie 0x63825363
            DHCP-Message (53), length 1: Discover
            MSZ (57), length 2: 1472
            Parameter-Request (55), length 35:
              Subnet-Mask (1), Time-Zone (2), Default-Gateway (3), Time-Server (4)
              IEN-Name-Server (5), Domain-Name-Server (6), Hostname (12), BS (13)
              Domain-Name (15), RP (17), EP (18), RSZ (22)
              TTL (23), BR (28), YD (40), YS (41)
              NTP (42), Vendor-Option (43), Requested-IP (50), Lease-Time (51)
              Server-ID (54), RN (58), RB (59), Vendor-Class (60)
              TFTP (66), BF (67), GUID (97), Unknown (128)
              Unknown (129), Unknown (130), Unknown (131), Unknown (132)
              Unknown (133), Unknown (134), Unknown (135)
            GUID (97), length 17: 0.28.2.27.3.13.4.158.5.157.6.80.7.0.8.0.9
            NDI (94), length 3: 1.3.16
            ARCH (93), length 2: 7
            Vendor-Class (60), length 32: "PXEClient:Arch:00007:UNDI:003016"
            END (255), length 0
09:49:59.149151 IP (tos 0xc0, ttl 64, id 9179, offset 0, flags [none], proto UDP (17), length 336)
    10.0.0.1.67 > 255.255.255.255.68: [bad udp cksum 0x0b4e -> 0x4afd!] BOOTP/DHCP, Reply, length 308, xid 0xef4963e4, Flags [Broadcast] (0x8000)
          Your-IP 10.0.0.117
          Server-IP 10.0.0.1
          Client-Ethernet-Address 1c:1b:0d:9e:9d:4e
          Vendor-rfc1048 Extensions
            Magic Cookie 0x63825363
            DHCP-Message (53), length 1: Offer
            Server-ID (54), length 4: 10.0.0.1
            Lease-Time (51), length 4: 43200
            BF (67), length 9: "ipxe.efi^@"
            RN (58), length 4: 21600
            RB (59), length 4: 37800
            Subnet-Mask (1), length 4: 255.255.0.0
            BR (28), length 4: 10.0.255.255
            Default-Gateway (3), length 4: 10.0.0.1
            Domain-Name-Server (6), length 4: 10.0.0.1
            Domain-Name (15), length 3: "lan"
            END (255), length 0
09:50:02.888325 IP (tos 0x0, ttl 64, id 35174, offset 0, flags [none], proto UDP (17), length 387)
    0.0.0.0.68 > 255.255.255.255.67: [udp sum ok] BOOTP/DHCP, Request from 1c:1b:0d:9e:9d:4e, length 359, xid 0xef4963e4, Flags [Broadcast] (0x8000)
          Client-Ethernet-Address 1c:1b:0d:9e:9d:4e
          Vendor-rfc1048 Extensions
            Magic Cookie 0x63825363
            DHCP-Message (53), length 1: Request
            Server-ID (54), length 4: 10.0.0.1
            Requested-IP (50), length 4: 10.0.0.117
            MSZ (57), length 2: 65280
            Parameter-Request (55), length 35:
              Subnet-Mask (1), Time-Zone (2), Default-Gateway (3), Time-Server (4)
              IEN-Name-Server (5), Domain-Name-Server (6), Hostname (12), BS (13)
              Domain-Name (15), RP (17), EP (18), RSZ (22)
              TTL (23), BR (28), YD (40), YS (41)
              NTP (42), Vendor-Option (43), Requested-IP (50), Lease-Time (51)
              Server-ID (54), RN (58), RB (59), Vendor-Class (60)
              TFTP (66), BF (67), GUID (97), Unknown (128)
              Unknown (129), Unknown (130), Unknown (131), Unknown (132)
              Unknown (133), Unknown (134), Unknown (135)
            GUID (97), length 17: 0.28.2.27.3.13.4.158.5.157.6.80.7.0.8.0.9
            NDI (94), length 3: 1.3.16
            ARCH (93), length 2: 7
            Vendor-Class (60), length 32: "PXEClient:Arch:00007:UNDI:003016"
            END (255), length 0
09:50:02.899699 IP (tos 0xc0, ttl 64, id 9417, offset 0, flags [none], proto UDP (17), length 336)
    10.0.0.1.67 > 255.255.255.255.68: [bad udp cksum 0x0b4e -> 0x47fd!] BOOTP/DHCP, Reply, length 308, xid 0xef4963e4, Flags [Broadcast] (0x8000)
          Your-IP 10.0.0.117
          Server-IP 10.0.0.1
          Client-Ethernet-Address 1c:1b:0d:9e:9d:4e
          Vendor-rfc1048 Extensions
            Magic Cookie 0x63825363
            DHCP-Message (53), length 1: ACK
            Server-ID (54), length 4: 10.0.0.1
            Lease-Time (51), length 4: 43200
            BF (67), length 9: "ipxe.efi^@"
            RN (58), length 4: 21600
            RB (59), length 4: 37800
            Subnet-Mask (1), length 4: 255.255.0.0
            BR (28), length 4: 10.0.255.255
            Default-Gateway (3), length 4: 10.0.0.1
            Domain-Name-Server (6), length 4: 10.0.0.1
            Domain-Name (15), length 3: "lan"
            END (255), length 0
09:50:03.802410 IP (tos 0x0, ttl 64, id 1536, offset 0, flags [none], proto UDP (17), length 421)
    0.0.0.0.68 > 255.255.255.255.67: [udp sum ok] BOOTP/DHCP, Request from 1c:1b:0d:9e:9d:4e, length 393, xid 0x82aebe5f, secs 4, Flags [Broadcast] (0x8000)
          Client-Ethernet-Address 1c:1b:0d:9e:9d:4e
          Vendor-rfc1048 Extensions
            Magic Cookie 0x63825363
            DHCP-Message (53), length 1: Discover
            MSZ (57), length 2: 1472
            ARCH (93), length 2: 7
            NDI (94), length 3: 1.3.10
            Vendor-Class (60), length 32: "PXEClient:Arch:00007:UNDI:003010"
            User-Class (77), length 4:
              instance#1: [ERROR: invalid option]
            Parameter-Request (55), length 25:
              Subnet-Mask (1), Default-Gateway (3), Domain-Name-Server (6), LOG (7)
              Hostname (12), Domain-Name (15), RP (17), MTU (26)
              NTP (42), Vendor-Option (43), Vendor-Class (60), TFTP (66)
              BF (67), Unknown (119), Classless-Static-Route (121), Unknown (128)
              Unknown (129), Unknown (130), Unknown (131), Unknown (132)
              Unknown (133), Unknown (134), Unknown (135), Unknown (175)
              Unknown (203)
            Unknown (175), length 39: 177.5.1.128.134.21.57.235.3.1.21.1.23.1.1.39.1.1.36.1.1.19.1.1.17.1.1.21.1.1.38.1.1.27.1.1.18.1.1
            Client-ID (61), length 7: ether 1c:1b:0d:9e:9d:4e
            GUID (97), length 17: 0.28.2.27.3.13.4.158.5.157.6.80.7.0.8.0.9
            END (255), length 0
09:50:03.815599 IP (tos 0xc0, ttl 64, id 9461, offset 0, flags [none], proto UDP (17), length 336)
    10.0.0.1.67 > 255.255.255.255.68: [bad udp cksum 0x0b4e -> 0x5d19!] BOOTP/DHCP, Reply, length 308, xid 0x82aebe5f, secs 4, Flags [Broadcast] (0x8000)
          Your-IP 10.0.0.117
          Server-IP 10.0.0.1
          Client-Ethernet-Address 1c:1b:0d:9e:9d:4e
          Vendor-rfc1048 Extensions
            Magic Cookie 0x63825363
            DHCP-Message (53), length 1: Offer
            Server-ID (54), length 4: 10.0.0.1
            Lease-Time (51), length 4: 43200
            BF (67), length 9: "ipxe.efi^@"
            RN (58), length 4: 21600
            RB (59), length 4: 37800
            Subnet-Mask (1), length 4: 255.255.0.0
            BR (28), length 4: 10.0.255.255
            Default-Gateway (3), length 4: 10.0.0.1
            Domain-Name-Server (6), length 4: 10.0.0.1
            Domain-Name (15), length 3: "lan"
            END (255), length 0
09:50:04.797563 IP (tos 0x0, ttl 64, id 1794, offset 0, flags [none], proto UDP (17), length 421)
    0.0.0.0.68 > 255.255.255.255.67: [udp sum ok] BOOTP/DHCP, Request from 1c:1b:0d:9e:9d:4e, length 393, xid 0x82aebe5f, secs 10, Flags [Broadcast] (0x8000)
          Client-Ethernet-Address 1c:1b:0d:9e:9d:4e
          Vendor-rfc1048 Extensions
            Magic Cookie 0x63825363
            DHCP-Message (53), length 1: Discover
            MSZ (57), length 2: 1472
            ARCH (93), length 2: 7
            NDI (94), length 3: 1.3.10
            Vendor-Class (60), length 32: "PXEClient:Arch:00007:UNDI:003010"
            User-Class (77), length 4:
              instance#1: [ERROR: invalid option]
            Parameter-Request (55), length 25:
              Subnet-Mask (1), Default-Gateway (3), Domain-Name-Server (6), LOG (7)
              Hostname (12), Domain-Name (15), RP (17), MTU (26)
              NTP (42), Vendor-Option (43), Vendor-Class (60), TFTP (66)
              BF (67), Unknown (119), Classless-Static-Route (121), Unknown (128)
              Unknown (129), Unknown (130), Unknown (131), Unknown (132)
              Unknown (133), Unknown (134), Unknown (135), Unknown (175)
              Unknown (203)
            Unknown (175), length 39: 177.5.1.128.134.21.57.235.3.1.21.1.23.1.1.39.1.1.36.1.1.19.1.1.17.1.1.21.1.1.38.1.1.27.1.1.18.1.1
            Client-ID (61), length 7: ether 1c:1b:0d:9e:9d:4e
            GUID (97), length 17: 0.28.2.27.3.13.4.158.5.157.6.80.7.0.8.0.9
            END (255), length 0
09:50:04.815635 IP (tos 0xc0, ttl 64, id 9466, offset 0, flags [none], proto UDP (17), length 336)
    10.0.0.1.67 > 255.255.255.255.68: [bad udp cksum 0x0b4e -> 0x5d13!] BOOTP/DHCP, Reply, length 308, xid 0x82aebe5f, secs 10, Flags [Broadcast] (0x8000)
          Your-IP 10.0.0.117
          Server-IP 10.0.0.1
          Client-Ethernet-Address 1c:1b:0d:9e:9d:4e
          Vendor-rfc1048 Extensions
            Magic Cookie 0x63825363
            DHCP-Message (53), length 1: Offer
            Server-ID (54), length 4: 10.0.0.1
            Lease-Time (51), length 4: 43200
            BF (67), length 9: "ipxe.efi^@"
            RN (58), length 4: 21600
            RB (59), length 4: 37800
            Subnet-Mask (1), length 4: 255.255.0.0
            BR (28), length 4: 10.0.255.255
            Default-Gateway (3), length 4: 10.0.0.1
            Domain-Name-Server (6), length 4: 10.0.0.1
            Domain-Name (15), length 3: "lan"
            END (255), length 0
09:50:06.797537 IP (tos 0x0, ttl 64, id 2055, offset 0, flags [none], proto UDP (17), length 433)
    0.0.0.0.68 > 255.255.255.255.67: [udp sum ok] BOOTP/DHCP, Request from 1c:1b:0d:9e:9d:4e, length 405, xid 0x82aebe5f, secs 18, Flags [Broadcast] (0x8000)
          Client-Ethernet-Address 1c:1b:0d:9e:9d:4e
          Vendor-rfc1048 Extensions
            Magic Cookie 0x63825363
            DHCP-Message (53), length 1: Request
            MSZ (57), length 2: 1472
            ARCH (93), length 2: 7
            NDI (94), length 3: 1.3.10
            Vendor-Class (60), length 32: "PXEClient:Arch:00007:UNDI:003010"
            User-Class (77), length 4:
              instance#1: [ERROR: invalid option]
            Parameter-Request (55), length 25:
              Subnet-Mask (1), Default-Gateway (3), Domain-Name-Server (6), LOG (7)
              Hostname (12), Domain-Name (15), RP (17), MTU (26)
              NTP (42), Vendor-Option (43), Vendor-Class (60), TFTP (66)
              BF (67), Unknown (119), Classless-Static-Route (121), Unknown (128)
              Unknown (129), Unknown (130), Unknown (131), Unknown (132)
              Unknown (133), Unknown (134), Unknown (135), Unknown (175)
              Unknown (203)
            Unknown (175), length 39: 177.5.1.128.134.21.57.235.3.1.21.1.23.1.1.39.1.1.36.1.1.19.1.1.17.1.1.21.1.1.38.1.1.27.1.1.18.1.1
            Client-ID (61), length 7: ether 1c:1b:0d:9e:9d:4e
            GUID (97), length 17: 0.28.2.27.3.13.4.158.5.157.6.80.7.0.8.0.9
            Server-ID (54), length 4: 10.0.0.1
            Requested-IP (50), length 4: 10.0.0.117
            END (255), length 0
09:50:06.819954 IP (tos 0xc0, ttl 64, id 9478, offset 0, flags [none], proto UDP (17), length 336)
    10.0.0.1.67 > 255.255.255.255.68: [bad udp cksum 0x0b4e -> 0x5a0b!] BOOTP/DHCP, Reply, length 308, xid 0x82aebe5f, secs 18, Flags [Broadcast] (0x8000)
          Your-IP 10.0.0.117
          Server-IP 10.0.0.1
          Client-Ethernet-Address 1c:1b:0d:9e:9d:4e
          Vendor-rfc1048 Extensions
            Magic Cookie 0x63825363
            DHCP-Message (53), length 1: ACK
            Server-ID (54), length 4: 10.0.0.1
            Lease-Time (51), length 4: 43200
            BF (67), length 9: "ipxe.efi^@"
            RN (58), length 4: 21600
            RB (59), length 4: 37800
            Subnet-Mask (1), length 4: 255.255.0.0
            BR (28), length 4: 10.0.255.255
            Default-Gateway (3), length 4: 10.0.0.1
            Domain-Name-Server (6), length 4: 10.0.0.1
            Domain-Name (15), length 3: "lan"
            END (255), length 0
```

And that Ducking WORKS!!!

-------------------------

shodanx | 2026-01-06 15:48:43 UTC | #21

New version of the script

I think it’s the good one this time !

Optionally clear all old dhcp-match and dhcp-option entries

```
# Clear all existing boot and match sections
while uci -q delete dhcp.@boot[0]; do :; done
while uci -q delete dhcp.@match[0]; do :; done
uci commit ; uci changes
```

Create dhcp-boot and dhcp-match for each entry, enable tftp, download iPXE firmwares

```
# Keep this list exactly as given
for entry in \
"1:NEC_PC98:NEC_PC98.efi" \
"2:Itanium:Itanium.efi" \
"3:DEC_Alpha:DEC_Alpha.efi" \
"4:Arc_x86:Arc_x86.efi" \
"5:Lean_Client:Lean_Client.efi" \
"6:UEFI_x86:ipxe.efi" \
"7:UEFI_x64:ipxe.efi" \
"8:UEFI_Xscale:UEFI_Xscale.efi" \
"9:EBC:EBC.efi" \
"10:ARM32_EFI:bootaa32.efi" \
"11:ARM64_EFI:bootaa64.efi" \
"12:PowerPC_OFW:PowerPC_OFW.efi" \
"13:PowerPC_ePAPR:PowerPC_ePAPR.efi" \
"14:POWER_OPAL_v3:POWER_OPAL_v3.efi" \
"15:UEFI_x86_http:ipxe.efi" \
"16:UEFI_x64_http:ipxe.efi" \
"17:EBC_http:EBC_http.efi" \
"18:ARM32_http:bootaa32.efi" \
"19:ARM64_http:bootaa64.efi" \
"20:PCAT_BIOS_http:ipxe.pxe" \
"21:UBoot_ARM32:UBoot_ARM32.efi" \
"22:UBoot_ARM64:UBoot_ARM64.efi" \
"23:UBoot_ARM32_http:UBoot_ARM32_http.efi" \
"24:UBoot_ARM64_http:UBoot_ARM64_http.efi" \
"25:RISC-V_32:RISC-V_32.efi" \
"26:RISC-V_32_http:RISC-V_32_http.efi" \
"27:RISC-V_64:RISC-V_64.efi" \
"28:RISC-V_64_http:RISC-V_64_http.efi" \
"29:RISC-V_128:RISC-V_128.efi" \
"30:RISC-V_128_http:RISC-V_128_http.efi" \
"31:s390_Basic:s390_Basic.efi" \
"32:s390_Extended:s390_Extended.efi" \
"33:MIPS_32:MIPS_32.efi" \
"34:MIPS_64:MIPS_64.efi" \
"35:Sunway_32:Sunway_32.efi" \
"36:Sunway_64:Sunway_64.efi" \
"37:LoongArch_32:LoongArch_32.efi" \
"38:LoongArch_32_http:LoongArch_32_http.efi" \
"39:LoongArch_64:LoongArch_64.efi" \
"40:LoongArch_64_http:LoongArch_64_http.efi" \
"41:arm_rpiboot:arm_rpiboot.efi"; do

  id="${entry%%:*}"
  rest="${entry#*:}"
  arch="${rest%%:*}"
  file="${rest#*:}"

  # Add match entry
  echo uci add dhcp match
  echo uci set dhcp.@match[-1].match="option:client-arch,$id"
  echo uci set dhcp.@match[-1].networkid="$arch"

  # Add boot entry
  echo uci add dhcp boot
  echo uci set dhcp.@boot[-1].filename="$file"
  echo uci set dhcp.@boot[-1].networkid="$arch"
done

uci add dhcp match
uci set dhcp.@match[-1].match='option:user-class,iPXE'
uci set dhcp.@match[-1].networkid='iPXE_client'
uci commit dhcp

# Enable tftp (for BOOTP clients, I think PXE clients can do everything with HTTP ?)
uci set dhcp.@dnsmasq[0].enable_tftp='1'
uci set dhcp.@dnsmasq[0].tftp_root='/www'

# Get offical iPXE boot files
wget -O /www/ipxe.efi https://boot.ipxe.org/ipxe.efi
wget -O /www/ipxe.pxe https://boot.ipxe.org/ipxe.pxe
wget -O /www/undionly.kpxe https://boot.ipxe.org/undionly.kpxe
wget -O /www/snponly.efi https://boot.ipxe.org/snponly.efi

# Do the changes
uci changes
uci commit
/etc/init.d/dnsmasq restart
```

This script is equivalent to running these commands

```
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,1
uci set dhcp.@match[-1].networkid=NEC_PC98
uci add dhcp boot
uci set dhcp.@boot[-1].filename=NEC_PC98.efi
uci set dhcp.@boot[-1].networkid=NEC_PC98
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,2
uci set dhcp.@match[-1].networkid=Itanium
uci add dhcp boot
uci set dhcp.@boot[-1].filename=Itanium.efi
uci set dhcp.@boot[-1].networkid=Itanium
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,3
uci set dhcp.@match[-1].networkid=DEC_Alpha
uci add dhcp boot
uci set dhcp.@boot[-1].filename=DEC_Alpha.efi
uci set dhcp.@boot[-1].networkid=DEC_Alpha
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,4
uci set dhcp.@match[-1].networkid=Arc_x86
uci add dhcp boot
uci set dhcp.@boot[-1].filename=Arc_x86.efi
uci set dhcp.@boot[-1].networkid=Arc_x86
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,5
uci set dhcp.@match[-1].networkid=Lean_Client
uci add dhcp boot
uci set dhcp.@boot[-1].filename=Lean_Client.efi
uci set dhcp.@boot[-1].networkid=Lean_Client
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,6
uci set dhcp.@match[-1].networkid=UEFI_x86
uci add dhcp boot
uci set dhcp.@boot[-1].filename=ipxe.efi
uci set dhcp.@boot[-1].networkid=UEFI_x86
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,7
uci set dhcp.@match[-1].networkid=UEFI_x64
uci add dhcp boot
uci set dhcp.@boot[-1].filename=ipxe.efi
uci set dhcp.@boot[-1].networkid=UEFI_x64
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,8
uci set dhcp.@match[-1].networkid=UEFI_Xscale
uci add dhcp boot
uci set dhcp.@boot[-1].filename=UEFI_Xscale.efi
uci set dhcp.@boot[-1].networkid=UEFI_Xscale
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,9
uci set dhcp.@match[-1].networkid=EBC
uci add dhcp boot
uci set dhcp.@boot[-1].filename=EBC.efi
uci set dhcp.@boot[-1].networkid=EBC
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,10
uci set dhcp.@match[-1].networkid=ARM32_EFI
uci add dhcp boot
uci set dhcp.@boot[-1].filename=bootaa32.efi
uci set dhcp.@boot[-1].networkid=ARM32_EFI
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,11
uci set dhcp.@match[-1].networkid=ARM64_EFI
uci add dhcp boot
uci set dhcp.@boot[-1].filename=bootaa64.efi
uci set dhcp.@boot[-1].networkid=ARM64_EFI
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,12
uci set dhcp.@match[-1].networkid=PowerPC_OFW
uci add dhcp boot
uci set dhcp.@boot[-1].filename=PowerPC_OFW.efi
uci set dhcp.@boot[-1].networkid=PowerPC_OFW
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,13
uci set dhcp.@match[-1].networkid=PowerPC_ePAPR
uci add dhcp boot
uci set dhcp.@boot[-1].filename=PowerPC_ePAPR.efi
uci set dhcp.@boot[-1].networkid=PowerPC_ePAPR
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,14
uci set dhcp.@match[-1].networkid=POWER_OPAL_v3
uci add dhcp boot
uci set dhcp.@boot[-1].filename=POWER_OPAL_v3.efi
uci set dhcp.@boot[-1].networkid=POWER_OPAL_v3
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,15
uci set dhcp.@match[-1].networkid=UEFI_x86_http
uci add dhcp boot
uci set dhcp.@boot[-1].filename=ipxe.efi
uci set dhcp.@boot[-1].networkid=UEFI_x86_http
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,16
uci set dhcp.@match[-1].networkid=UEFI_x64_http
uci add dhcp boot
uci set dhcp.@boot[-1].filename=ipxe.efi
uci set dhcp.@boot[-1].networkid=UEFI_x64_http
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,17
uci set dhcp.@match[-1].networkid=EBC_http
uci add dhcp boot
uci set dhcp.@boot[-1].filename=EBC_http.efi
uci set dhcp.@boot[-1].networkid=EBC_http
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,18
uci set dhcp.@match[-1].networkid=ARM32_http
uci add dhcp boot
uci set dhcp.@boot[-1].filename=bootaa32.efi
uci set dhcp.@boot[-1].networkid=ARM32_http
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,19
uci set dhcp.@match[-1].networkid=ARM64_http
uci add dhcp boot
uci set dhcp.@boot[-1].filename=bootaa64.efi
uci set dhcp.@boot[-1].networkid=ARM64_http
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,20
uci set dhcp.@match[-1].networkid=PCAT_BIOS_http
uci add dhcp boot
uci set dhcp.@boot[-1].filename=ipxe.pxe
uci set dhcp.@boot[-1].networkid=PCAT_BIOS_http
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,21
uci set dhcp.@match[-1].networkid=UBoot_ARM32
uci add dhcp boot
uci set dhcp.@boot[-1].filename=UBoot_ARM32.efi
uci set dhcp.@boot[-1].networkid=UBoot_ARM32
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,22
uci set dhcp.@match[-1].networkid=UBoot_ARM64
uci add dhcp boot
uci set dhcp.@boot[-1].filename=UBoot_ARM64.efi
uci set dhcp.@boot[-1].networkid=UBoot_ARM64
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,23
uci set dhcp.@match[-1].networkid=UBoot_ARM32_http
uci add dhcp boot
uci set dhcp.@boot[-1].filename=UBoot_ARM32_http.efi
uci set dhcp.@boot[-1].networkid=UBoot_ARM32_http
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,24
uci set dhcp.@match[-1].networkid=UBoot_ARM64_http
uci add dhcp boot
uci set dhcp.@boot[-1].filename=UBoot_ARM64_http.efi
uci set dhcp.@boot[-1].networkid=UBoot_ARM64_http
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,25
uci set dhcp.@match[-1].networkid=RISC-V_32
uci add dhcp boot
uci set dhcp.@boot[-1].filename=RISC-V_32.efi
uci set dhcp.@boot[-1].networkid=RISC-V_32
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,26
uci set dhcp.@match[-1].networkid=RISC-V_32_http
uci add dhcp boot
uci set dhcp.@boot[-1].filename=RISC-V_32_http.efi
uci set dhcp.@boot[-1].networkid=RISC-V_32_http
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,27
uci set dhcp.@match[-1].networkid=RISC-V_64
uci add dhcp boot
uci set dhcp.@boot[-1].filename=RISC-V_64.efi
uci set dhcp.@boot[-1].networkid=RISC-V_64
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,28
uci set dhcp.@match[-1].networkid=RISC-V_64_http
uci add dhcp boot
uci set dhcp.@boot[-1].filename=RISC-V_64_http.efi
uci set dhcp.@boot[-1].networkid=RISC-V_64_http
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,29
uci set dhcp.@match[-1].networkid=RISC-V_128
uci add dhcp boot
uci set dhcp.@boot[-1].filename=RISC-V_128.efi
uci set dhcp.@boot[-1].networkid=RISC-V_128
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,30
uci set dhcp.@match[-1].networkid=RISC-V_128_http
uci add dhcp boot
uci set dhcp.@boot[-1].filename=RISC-V_128_http.efi
uci set dhcp.@boot[-1].networkid=RISC-V_128_http
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,31
uci set dhcp.@match[-1].networkid=s390_Basic
uci add dhcp boot
uci set dhcp.@boot[-1].filename=s390_Basic.efi
uci set dhcp.@boot[-1].networkid=s390_Basic
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,32
uci set dhcp.@match[-1].networkid=s390_Extended
uci add dhcp boot
uci set dhcp.@boot[-1].filename=s390_Extended.efi
uci set dhcp.@boot[-1].networkid=s390_Extended
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,33
uci set dhcp.@match[-1].networkid=MIPS_32
uci add dhcp boot
uci set dhcp.@boot[-1].filename=MIPS_32.efi
uci set dhcp.@boot[-1].networkid=MIPS_32
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,34
uci set dhcp.@match[-1].networkid=MIPS_64
uci add dhcp boot
uci set dhcp.@boot[-1].filename=MIPS_64.efi
uci set dhcp.@boot[-1].networkid=MIPS_64
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,35
uci set dhcp.@match[-1].networkid=Sunway_32
uci add dhcp boot
uci set dhcp.@boot[-1].filename=Sunway_32.efi
uci set dhcp.@boot[-1].networkid=Sunway_32
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,36
uci set dhcp.@match[-1].networkid=Sunway_64
uci add dhcp boot
uci set dhcp.@boot[-1].filename=Sunway_64.efi
uci set dhcp.@boot[-1].networkid=Sunway_64
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,37
uci set dhcp.@match[-1].networkid=LoongArch_32
uci add dhcp boot
uci set dhcp.@boot[-1].filename=LoongArch_32.efi
uci set dhcp.@boot[-1].networkid=LoongArch_32
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,38
uci set dhcp.@match[-1].networkid=LoongArch_32_http
uci add dhcp boot
uci set dhcp.@boot[-1].filename=LoongArch_32_http.efi
uci set dhcp.@boot[-1].networkid=LoongArch_32_http
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,39
uci set dhcp.@match[-1].networkid=LoongArch_64
uci add dhcp boot
uci set dhcp.@boot[-1].filename=LoongArch_64.efi
uci set dhcp.@boot[-1].networkid=LoongArch_64
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,40
uci set dhcp.@match[-1].networkid=LoongArch_64_http
uci add dhcp boot
uci set dhcp.@boot[-1].filename=LoongArch_64_http.efi
uci set dhcp.@boot[-1].networkid=LoongArch_64_http
uci add dhcp match
uci set dhcp.@match[-1].match=option:client-arch,41
uci set dhcp.@match[-1].networkid=arm_rpiboot
uci add dhcp boot
uci set dhcp.@boot[-1].filename=arm_rpiboot.efi
uci set dhcp.@boot[-1].networkid=arm_rpiboot

# Prevent boot loop with user class iPXE handling
uci add dhcp match
uci set dhcp.@match[-1].match='option:user-class,iPXE'
uci set dhcp.@match[-1].networkid='iPXE_client'
uci commit dhcp

# Enable tftp (for BOOTP clients, I think PXE clients can do everything with HTTP ?)
uci set dhcp.@dnsmasq[0].enable_tftp='1'
uci set dhcp.@dnsmasq[0].tftp_root='/www'

# Get offical iPXE boot files
wget -O /www/ipxe.efi https://boot.ipxe.org/ipxe.efi
wget -O /www/ipxe.pxe https://boot.ipxe.org/ipxe.pxe
wget -O /www/undionly.kpxe https://boot.ipxe.org/undionly.kpxe
wget -O /www/snponly.efi https://boot.ipxe.org/snponly.efi

uci commit
uci changes
/etc/init.d/dnsmasq restart
```

# Result

![image|238x500](upload://xbyX3qolYradLuwXEfCeX0AAfev.png)

![image|227x500](upload://ojRvQp7Yv3AmsleFo5hpUIUD947.png)

Wow beautiful, next phase testing

I will test 

32 and 64 bit pc boot in bios and efi mode then raspberry pi 4 boot, that’s all I have

To Do

```
Create generic all purpose autoexec.ipxe example file that covers
booting from another server
booting from netboox.xyz
booting from local drives
booting from iscsi (and NBD ? and AoE what's that? )
maybe nfs boot
booting various ramdrives, like initramfs and wimfiles and maybe vhd files ? qcow2 files ? 
On the router
have the other bootloaders (wimboot, grub, pxelinux, windows boot manager, maybe rEFInd ? )
Quickly setup a usb stick for extra storage
download and serve linux isos
bunch of useful stuff like netboot memtest86, gparted, clonezille, SystemRescue, recovery initramfs and make sure VMs can boot into those
setup iscsi server
```

I also found a “bug”, unchecking tftp, will wipe all your settings !

So don’t uncheck it

![image|581x91](upload://kNWPjiUR1AsnlGiH3WxZaraUIuB.png)

-------------------------

lleachii | 2026-01-07 11:25:27 UTC | #22

On what version of LuCI should the tags tab appear?

-------------------------

shodanx | 2026-01-07 13:14:15 UTC | #23

Hello,

It possibly is when the dhcp_redesign_phase2 branch was deleted on possibly commit 0bf2ea9.

I say possibly because this is what I have in some text file, but I can’t verify it anymore and I don’t remember where I got it.

Here is the github history of the file dhcp.js

`git log --all -- modules/luci-mod-network/htdocs/luci-static/resources/view/network/dhcp.js`

https://pastebin.com/B0EGhswg

What I can tell you for sure is that they are present on

`26.003.60747~0d55a89`

![image|484x500](upload://3MRKd9B9W4wJCEcze61IPN5LBJm.png)

I am preparing a generic autoexec.ipxe file for flexible netbooting of anything a openwrt user might want

I think Enabling iPXE booting from openwrt could and should be a one click enable process and I’m very close to that

-------------------------

shodanx | 2026-01-07 16:05:26 UTC | #24

Hello @[systemcrash](https://forum.openwrt.org/u/systemcrash)

I am now exploring the other aspect of this dhcp tag system,

I am trying to create the match for “de:ad:be:ef:\*:\*“ to associated non-routing gateway and dns (later will be fakeinternet addresses)

First step, creating match tags

![image|690x178](upload://mXY7y7eKdhe1UNdqxWvKkA1aBSB.png)

![image|529x98](upload://obuj4uTPIVJwWdzPpwv7QSP9FlL.png)

second create a dynamic lease

![image|407x500](upload://cgP9gUyLbvivyQbI9CrnLvyi2C7.png)

![image|479x131](upload://kWOgtL3z27QHVAZif91hmUjRKES.png)

![image|690x99](upload://9g5GOAHs9kP0cWNzQjN6g16kMTG.png)

Result in dnsmasq.conf file

```
dhcp-host=de:ad:be:ef:*:*,set:deadgateway,placeholdername
dhcp-option=tag:deadgateway,3,10.0.0.254

```

dnsmasq servers starts without issues

starting VM with MAC de:ad:be:ef:00:01

from logread

```
Wed Jan  7 10:52:02 2026 daemon.info dnsmasq-dhcp[1]: 4276636449 available DHCP range: 10.0.0.100 -- 10.0.0.249
Wed Jan  7 10:52:02 2026 daemon.info dnsmasq-dhcp[1]: 4276636449 vendor class: MSFT 5.0
Wed Jan  7 10:52:02 2026 daemon.info dnsmasq-dhcp[1]: 4276636449 client provides name: wintest666
Wed Jan  7 10:52:02 2026 daemon.info dnsmasq-dhcp[1]: 4276636449 DHCPREQUEST(br-lan) 10.0.0.235 de:ad:be:ef:00:01
Wed Jan  7 10:52:02 2026 daemon.info dnsmasq-dhcp[1]: 4276636449 tags: lan, deadgateway, known, br-lan
Wed Jan  7 10:52:02 2026 daemon.info dnsmasq-dhcp[1]: 4276636449 DHCPACK(br-lan) 10.0.0.235 de:ad:be:ef:00:01 placeholdername
Wed Jan  7 10:52:02 2026 daemon.info dnsmasq-dhcp[1]: 4276636449 requested options: 1:netmask, 3:router, 6:dns-server, 15:domain-name,
Wed Jan  7 10:52:02 2026 daemon.info dnsmasq-dhcp[1]: 4276636449 requested options: 31:router-discovery, 33:static-route, 43:vendor-encap,
Wed Jan  7 10:52:02 2026 daemon.info dnsmasq-dhcp[1]: 4276636449 requested options: 44:netbios-ns, 46:netbios-nodetype, 47:netbios-scope,
Wed Jan  7 10:52:02 2026 daemon.info dnsmasq-dhcp[1]: 4276636449 requested options: 119:domain-search, 121:classless-static-route,
Wed Jan  7 10:52:02 2026 daemon.info dnsmasq-dhcp[1]: 4276636449 requested options: 249, 252
Wed Jan  7 10:52:02 2026 daemon.info dnsmasq-dhcp[1]: 4276636449 next server: 10.0.0.1
Wed Jan  7 10:52:02 2026 daemon.info dnsmasq-dhcp[1]: 4276636449 sent size:  1 option: 53 message-type  5
Wed Jan  7 10:52:02 2026 daemon.info dnsmasq-dhcp[1]: 4276636449 sent size:  4 option: 54 server-identifier  10.0.0.1
Wed Jan  7 10:52:02 2026 daemon.info dnsmasq-dhcp[1]: 4276636449 sent size:  4 option: 51 lease-time  12h
Wed Jan  7 10:52:02 2026 daemon.info dnsmasq-dhcp[1]: 4276636449 sent size:  4 option: 58 T1  6h
Wed Jan  7 10:52:02 2026 daemon.info dnsmasq-dhcp[1]: 4276636449 sent size:  4 option: 59 T2  10h30m
Wed Jan  7 10:52:02 2026 daemon.info dnsmasq-dhcp[1]: 4276636449 sent size:  4 option:  1 netmask  255.255.0.0
Wed Jan  7 10:52:02 2026 daemon.info dnsmasq-dhcp[1]: 4276636449 sent size:  4 option: 28 broadcast  10.0.255.255
Wed Jan  7 10:52:02 2026 daemon.info dnsmasq-dhcp[1]: 4276636449 sent size:  4 option:  6 dns-server  10.0.0.1
Wed Jan  7 10:52:02 2026 daemon.info dnsmasq-dhcp[1]: 4276636449 sent size:  3 option: 15 domain-name  lan
Wed Jan  7 10:52:02 2026 daemon.info dnsmasq-dhcp[1]: 4276636449 sent size: 22 option: 81 FQDN  03:ff:ff:70:6c:61:63:65:68:6f:6c:64:65:72...
Wed Jan  7 10:52:02 2026 daemon.info dnsmasq-dhcp[1]: 4276636449 sent size:  4 option:  3 router  10.0.0.254
```

from tcpdump

```
10:52:02.715044 IP (tos 0x0, ttl 128, id 54428, offset 0, flags [none], proto UDP (17), length 340)
    0.0.0.0.68 > 255.255.255.255.67: [udp sum ok] BOOTP/DHCP, Request from de:ad:be:ef:00:01, length 312, xid 0xfee84b21, Flags [none] (0x0000)
          Client-Ethernet-Address de:ad:be:ef:00:01
          Vendor-rfc1048 Extensions
            Magic Cookie 0x63825363
            DHCP-Message (53), length 1: Request
            Client-ID (61), length 7: ether de:ad:be:ef:00:01
            Requested-IP (50), length 4: 10.0.0.235
            Hostname (12), length 10: "wintest666"
            FQDN (81), length 13: "wintest666"
            Vendor-Class (60), length 8: "MSFT 5.0"
            Parameter-Request (55), length 14:
              Subnet-Mask (1), Default-Gateway (3), Domain-Name-Server (6), Domain-Name (15)
              Router-Discovery (31), Static-Route (33), Vendor-Option (43), Netbios-Name-Server (44)
              Netbios-Node (46), Netbios-Scope (47), Unknown (119), Classless-Static-Route (121)
              Classless-Static-Route-Microsoft (249), Unknown (252)
            END (255), length 0
10:52:02.724959 IP (tos 0xc0, ttl 64, id 3946, offset 0, flags [none], proto UDP (17), length 349)
    10.0.0.1.67 > 10.0.0.235.68: [bad udp cksum 0x1646 -> 0xcd9b!] BOOTP/DHCP, Reply, length 321, xid 0xfee84b21, Flags [none] (0x0000)
          Your-IP 10.0.0.235
          Server-IP 10.0.0.1
          Client-Ethernet-Address de:ad:be:ef:00:01
          Vendor-rfc1048 Extensions
            Magic Cookie 0x63825363
            DHCP-Message (53), length 1: ACK
            Server-ID (54), length 4: 10.0.0.1
            Lease-Time (51), length 4: 43200
            RN (58), length 4: 21600
            RB (59), length 4: 37800
            Subnet-Mask (1), length 4: 255.255.0.0
            BR (28), length 4: 10.0.255.255
            Domain-Name-Server (6), length 4: 10.0.0.1
            Domain-Name (15), length 3: "lan"
            FQDN (81), length 22: [SO] 255/255 "placeholdername.lan"
            Default-Gateway (3), length 4: 10.0.0.254
            END (255), length 0
```

![image|690x62](upload://ddnWK8lJ5fowooPJTyBtlJtnqb0.png)

This works HOWEVER, there is an issue, the hostname is override to placeholdername.lan

![image|690x434](upload://yO6o9uS0VTbwmtLdftanMSCRJi4.jpeg)

So I attempt to modify the dynamic lease to not include the hostname override (which the interface specifies is optional)

![image|566x206](upload://eHjJPqAzc4wdc4THbyABOJrQ8Bo.png)

![image|286x72](upload://1EgyX1LYSZV4S4w0LIQqJep7dFZ.png)

![image|690x91](upload://oVaQh5kIRCHkpPRg2cLpSCRd5Et.png)

dnsmasq server restarts without issues

Virtual machine with mac de:ad:be:ef:00:01 is restarted

from logread

```
Wed Jan  7 10:59:44 2026 daemon.info dnsmasq-dhcp[1]: 3498221867 available DHCP range: 10.0.0.100 -- 10.0.0.249
Wed Jan  7 10:59:44 2026 daemon.info dnsmasq-dhcp[1]: 3498221867 vendor class: MSFT 5.0
Wed Jan  7 10:59:44 2026 daemon.info dnsmasq-dhcp[1]: 3498221867 client provides name: wintest666
Wed Jan  7 10:59:44 2026 daemon.info dnsmasq-dhcp[1]: 3498221867 DHCPREQUEST(br-lan) 10.0.0.235 de:ad:be:ef:00:01
Wed Jan  7 10:59:44 2026 daemon.info dnsmasq-dhcp[1]: 3498221867 tags: lan, br-lan
Wed Jan  7 10:59:44 2026 daemon.info dnsmasq-dhcp[1]: 3498221867 DHCPACK(br-lan) 10.0.0.235 de:ad:be:ef:00:01 wintest666
Wed Jan  7 10:59:44 2026 daemon.info dnsmasq-dhcp[1]: 3498221867 requested options: 1:netmask, 3:router, 6:dns-server, 15:domain-name,
Wed Jan  7 10:59:44 2026 daemon.info dnsmasq-dhcp[1]: 3498221867 requested options: 31:router-discovery, 33:static-route, 43:vendor-encap,
Wed Jan  7 10:59:44 2026 daemon.info dnsmasq-dhcp[1]: 3498221867 requested options: 44:netbios-ns, 46:netbios-nodetype, 47:netbios-scope,
Wed Jan  7 10:59:44 2026 daemon.info dnsmasq-dhcp[1]: 3498221867 requested options: 119:domain-search, 121:classless-static-route,
Wed Jan  7 10:59:44 2026 daemon.info dnsmasq-dhcp[1]: 3498221867 requested options: 249, 252
Wed Jan  7 10:59:44 2026 daemon.info dnsmasq-dhcp[1]: 3498221867 next server: 10.0.0.1
Wed Jan  7 10:59:44 2026 daemon.info dnsmasq-dhcp[1]: 3498221867 sent size:  1 option: 53 message-type  5
Wed Jan  7 10:59:44 2026 daemon.info dnsmasq-dhcp[1]: 3498221867 sent size:  4 option: 54 server-identifier  10.0.0.1
Wed Jan  7 10:59:44 2026 daemon.info dnsmasq-dhcp[1]: 3498221867 sent size:  4 option: 51 lease-time  12h
Wed Jan  7 10:59:44 2026 daemon.info dnsmasq-dhcp[1]: 3498221867 sent size:  4 option: 58 T1  6h
Wed Jan  7 10:59:44 2026 daemon.info dnsmasq-dhcp[1]: 3498221867 sent size:  4 option: 59 T2  10h30m
Wed Jan  7 10:59:44 2026 daemon.info dnsmasq-dhcp[1]: 3498221867 sent size:  4 option:  1 netmask  255.255.0.0
Wed Jan  7 10:59:44 2026 daemon.info dnsmasq-dhcp[1]: 3498221867 sent size:  4 option: 28 broadcast  10.0.255.255
Wed Jan  7 10:59:44 2026 daemon.info dnsmasq-dhcp[1]: 3498221867 sent size:  4 option:  3 router  10.0.0.1
Wed Jan  7 10:59:44 2026 daemon.info dnsmasq-dhcp[1]: 3498221867 sent size:  4 option:  6 dns-server  10.0.0.1
Wed Jan  7 10:59:44 2026 daemon.info dnsmasq-dhcp[1]: 3498221867 sent size:  3 option: 15 domain-name  lan
Wed Jan  7 10:59:44 2026 daemon.info dnsmasq-dhcp[1]: 3498221867 sent size: 17 option: 81 FQDN  03:ff:ff:77:69:6e:74:65:73:74:36:36:36:2e...
```

from tcpdump

```
10:59:44.175837 IP (tos 0x0, ttl 128, id 2447, offset 0, flags [none], proto UDP (17), length 340)
    0.0.0.0.68 > 255.255.255.255.67: [udp sum ok] BOOTP/DHCP, Request from de:ad:be:ef:00:01, length 312, xid 0xd082a12b, Flags [none] (0x0000)
          Client-Ethernet-Address de:ad:be:ef:00:01
          Vendor-rfc1048 Extensions
            Magic Cookie 0x63825363
            DHCP-Message (53), length 1: Request
            Client-ID (61), length 7: ether de:ad:be:ef:00:01
            Requested-IP (50), length 4: 10.0.0.235
            Hostname (12), length 10: "wintest666"
            FQDN (81), length 13: "wintest666"
            Vendor-Class (60), length 8: "MSFT 5.0"
            Parameter-Request (55), length 14:
              Subnet-Mask (1), Default-Gateway (3), Domain-Name-Server (6), Domain-Name (15)
              Router-Discovery (31), Static-Route (33), Vendor-Option (43), Netbios-Name-Server (44)
              Netbios-Node (46), Netbios-Scope (47), Unknown (119), Classless-Static-Route (121)
              Classless-Static-Route-Microsoft (249), Unknown (252)
            END (255), length 0
10:59:44.184685 IP (tos 0xc0, ttl 64, id 23846, offset 0, flags [none], proto UDP (17), length 344)
    10.0.0.1.67 > 10.0.0.235.68: [bad udp cksum 0x1641 -> 0x8a96!] BOOTP/DHCP, Reply, length 316, xid 0xd082a12b, Flags [none] (0x0000)
          Your-IP 10.0.0.235
          Server-IP 10.0.0.1
          Client-Ethernet-Address de:ad:be:ef:00:01
          Vendor-rfc1048 Extensions
            Magic Cookie 0x63825363
            DHCP-Message (53), length 1: ACK
            Server-ID (54), length 4: 10.0.0.1
            Lease-Time (51), length 4: 43200
            RN (58), length 4: 21600
            RB (59), length 4: 37800
            Subnet-Mask (1), length 4: 255.255.0.0
            BR (28), length 4: 10.0.255.255
            Default-Gateway (3), length 4: 10.0.0.1
            Domain-Name-Server (6), length 4: 10.0.0.1
            Domain-Name (15), length 3: "lan"
            FQDN (81), length 17: [SO] 255/255 "wintest666.lan"
            END (255), length 0
```

Result

![image|690x434](upload://yQVIdLEuGZzqm1hjQ2sgiWBDuso.jpeg)

So the question becomes, 

Can we make a dynamic lease, matching a wildcard dns, without setting a hostname override ?

Here is looking at the dnsmasq temp config file

```
root@router:~# cat /tmp/etc/dnsmasq.conf.cfg01411c | grep dhcp-host
root@router:~# cat /tmp/etc/dnsmasq.conf.cfg01411c | grep dhcp-option
dhcp-option=tag:deadgateway,3,10.0.0.254
root@router:~#

```

Without a hostname the dhcp-option does not get created, perhaps it is a bug in the “dnsmasq init script“ you mentioned ?

-------------------------

shodanx | 2026-01-07 16:40:08 UTC | #25

I think I found a workaround this issue

So in the dnsmasq init script, which I think is this

https://github.com/openwrt/openwrt/blob/master/package/network/services/dnsmasq/files/dnsmasq.init

We have this function

```
dhcp_host_add() {
        local cfg="$1"
        local hosttag nametime addrs duids macs tags mtags

        config_get_bool force "$cfg" force 0

        config_get networkid "$cfg" networkid
        [ -n "$networkid" ] && dhcp_option_add "$cfg" "$networkid" "$force"

        config_get_bool enable "$cfg" enable 1
        [ "$enable" = "0" ] && return 0

        config_get name "$cfg" name
        config_get ip "$cfg" ip
        config_get hostid "$cfg" hostid

        [ -z "$ip" ] && [ -z "$name" ] && [ -z "$hostid" ] && return 0

        config_get_bool dns "$cfg" dns 0
        [ "$dns" = "1" ] && [ -n "$ip" ] && [ -n "$name" ] && {
                echo "$ip $name${DOMAIN:+.$DOMAIN}" >> "$HOSTFILE_TMP"
        }

        config_get mac "$cfg" mac
        config_get duid "$cfg" duid
        config_get tag "$cfg" tag

        add_tag() {
                mtags="${mtags}tag:$1,"
        }
        config_list_foreach "$cfg" match_tag add_tag

        if [ -n "$mac" ]; then
                # --dhcp-host=00:20:e0:3b:13:af,192.168.0.199,lap
                # many MAC are possible to track a laptop ON/OFF dock
                for m in $mac; do append macs "$m" ","; done
        fi

        if [ $DNSMASQ_DHCP_VER -eq 6 ] && [ -n "$duid" ]; then
                # --dhcp-host=id:00:03:00:01:12:00:00:01:02:03,[::beef],lap
                # one (virtual) machine gets one DUID per RFC3315
                duids="id:${duid// */}"
        fi

        if [ -z "$macs" ] && [ -z "$duids" ]; then
                # --dhcp-host=lap,192.168.0.199,[::beef]
                [ -n "$name" ] || return 0
                macs="$name"
                name=""
        fi

        if [ -n "$hostid" ]; then
                hex_to_hostid hostid "$hostid"
        fi

        if [ -n "$tag" ]; then
                for t in $tag; do append tags "$t" ",set:"; done
        fi

        config_get_bool broadcast "$cfg" broadcast 0
        config_get leasetime "$cfg" leasetime

        [ "$broadcast" = "0" ] && broadcast= || broadcast=",set:needs-broadcast"

        hosttag="${networkid:+,set:${networkid}}${tags:+,set:${tags}}$broadcast"
        nametime="${name:+,$name}${leasetime:+,$leasetime}"

        if [ $DNSMASQ_DHCP_VER -eq 6 ]; then
                addrs="${ip:+,$ip}${hostid:+,[::$hostid]}"
                xappend "--dhcp-host=$mtags$macs${duids:+,$duids}$hosttag$addrs$nametime"
        else
                xappend "--dhcp-host=$mtags$macs$hosttag${ip:+,$ip}$nametime"
        fi
}
```

We have this line

```
[ -z "$ip" ] && [ -z "$name" ] && [ -z "$hostid" ] && return 0
```

Which skips the dhcp-host entry creation, if all these 3 values are empty.

But in my case it (should?) be possible to have only a $mac filled in ?

```
[ -z "$ip" ] && [ -z "$name" ] && [ -z "$hostid" ] && [ -z "$mac" ] && return 0
```

I don’t know if that could cause further deleterious or unexpected side effects, luci does accept an entry made this way, it seems this is just a leftover from the era where static leases couldn’t be dynamic.

I will implement this change in my router and report back on the effect.

-------------------------

shodanx | 2026-01-07 17:24:32 UTC | #26

Ok, first applying the change explained above

Here is my sed command to perform this operation.

```
sed -i '/\[ -z "\$ip" \] && \[ -z "\$name" \] && \[ -z "\$hostid" \] && return 0/c\        [ -z "$ip" ] && [ -z "$name" ] && [ -z "$hostid" ] && [ -z "$mac" ] && return 0' /etc/init.d/dnsmasq
```

Here it is in action

```
root@router:~# cat /etc/init.d/dnsmasq | grep ip | grep name | grep hostid | grep return
        [ -z "$ip" ] && [ -z "$name" ] && [ -z "$hostid" ] && return 0
root@router:~# sed -i '/\[ -z "\$ip" \] && \[ -z "\$name" \] && \[ -z "\$hostid" \] && return 0/c\        [ -z "$ip" ] && [ -z "$name" ] && [ -z "$hostid" ] && [ -z "$mac" ] && return 0' /etc/init.d/dnsmasq
root@router:~# cat /etc/init.d/dnsmasq | grep ip | grep name | grep hostid | grep return
        [ -z "$ip" ] && [ -z "$name" ] && [ -z "$hostid" ] && [ -z "$mac" ] && return 0
root@router:~#

```

then I restart dnsmasq

```
root@router:~# /etc/init.d/dnsmasq restart
udhcpc: started, v1.37.0
udhcpc: broadcasting discover
udhcpc: no lease, failing
root@router:~#
```

from logread

```
Wed Jan  7 11:53:45 2026 daemon.info dnsmasq[1]: exiting on receipt of SIGTERM
Wed Jan  7 11:53:49 2026 daemon.info dnsmasq[1]: started, version 2.91 cachesize 1000
Wed Jan  7 11:53:49 2026 daemon.info dnsmasq[1]: DNS service limited to local subnets
Wed Jan  7 11:53:49 2026 daemon.info dnsmasq[1]: compile time options: IPv6 GNU-getopt no-DBus UBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TF                                                                            TP no-conntrack no-ipset no-nftset no-auth no-DNSSEC no-ID loop-detect inotify dumpfile
Wed Jan  7 11:53:49 2026 daemon.info dnsmasq[1]: UBus support enabled: connected to system bus
Wed Jan  7 11:53:49 2026 daemon.info dnsmasq-dhcp[1]: DHCP, IP range 10.0.0.100 -- 10.0.0.249, lease time 12h
Wed Jan  7 11:53:49 2026 daemon.info dnsmasq-tftp[1]: TFTP root is /www
Wed Jan  7 11:53:49 2026 daemon.info dnsmasq[1]: using only locally-known addresses for test
Wed Jan  7 11:53:49 2026 daemon.info dnsmasq[1]: using only locally-known addresses for onion
Wed Jan  7 11:53:49 2026 daemon.info dnsmasq[1]: using only locally-known addresses for localhost
Wed Jan  7 11:53:49 2026 daemon.info dnsmasq[1]: using only locally-known addresses for local
Wed Jan  7 11:53:49 2026 daemon.info dnsmasq[1]: using only locally-known addresses for invalid
Wed Jan  7 11:53:49 2026 daemon.info dnsmasq[1]: using only locally-known addresses for bind
Wed Jan  7 11:53:49 2026 daemon.info dnsmasq[1]: using only locally-known addresses for lan
Wed Jan  7 11:53:49 2026 daemon.info dnsmasq[1]: reading /tmp/resolv.conf.d/resolv.conf.auto
Wed Jan  7 11:53:49 2026 daemon.warn dnsmasq[1]: ignoring nameserver 10.0.0.1 - local interface
Wed Jan  7 11:53:49 2026 daemon.info dnsmasq[1]: using nameserver 8.8.8.8#53
Wed Jan  7 11:53:49 2026 daemon.info dnsmasq[1]: using only locally-known addresses for test
Wed Jan  7 11:53:49 2026 daemon.info dnsmasq[1]: using only locally-known addresses for onion
Wed Jan  7 11:53:49 2026 daemon.info dnsmasq[1]: using only locally-known addresses for localhost
Wed Jan  7 11:53:49 2026 daemon.info dnsmasq[1]: using only locally-known addresses for local
Wed Jan  7 11:53:49 2026 daemon.info dnsmasq[1]: using only locally-known addresses for invalid
Wed Jan  7 11:53:49 2026 daemon.info dnsmasq[1]: using only locally-known addresses for bind
Wed Jan  7 11:53:49 2026 daemon.info dnsmasq[1]: using only locally-known addresses for lan
Wed Jan  7 11:53:49 2026 daemon.info dnsmasq[1]: read /etc/hosts - 12 names
Wed Jan  7 11:53:49 2026 daemon.info dnsmasq[1]: read /tmp/hosts/dhcp.cfg01411c - 4 names
Wed Jan  7 11:53:49 2026 daemon.info dnsmasq-dhcp[1]: read /etc/ethers - 0 addresses

```

Looks good no errors 

but looking at the temporary dnsmasq config file

```
root@router:~# cat /tmp/etc/dnsmasq.conf.cfg01411c
# auto-generated config file from /etc/config/dhcp
conf-file=/etc/dnsmasq.conf
dhcp-authoritative
domain-needed
localise-queries
read-ethers
enable-ubus=dnsmasq
expand-hosts
enable-tftp
bind-dynamic
local-service
log-dhcp
cache-size=1000
edns-packet-max=1232
domain=lan
local=/lan/
addn-hosts=/tmp/hosts
dhcp-leasefile=/tmp/dhcp.leases
tftp-root=/www
resolv-file=/tmp/resolv.conf.d/resolv.conf.auto
stop-dns-rebind
rebind-localhost-ok
dhcp-broadcast=tag:needs-broadcast
conf-dir=/tmp/dnsmasq.cfg01411c.d
user=dnsmasq
group=dnsmasq


dhcp-ignore-names=tag:dhcp_bogus_hostname
conf-file=/usr/share/dnsmasq/dhcpbogushostname.conf

dhcp-option=tag:deadgateway,3,10.0.0.254


bogus-priv
conf-file=/usr/share/dnsmasq/rfc6761.conf
dhcp-range=set:lan,10.0.0.100,10.0.0.249,255.255.0.0,12h
no-dhcp-interface=wan
```

This was not enough to create the dhcp-host line

here is uci show dhcp

```
root@router:~# uci show dhcp
dhcp.@dnsmasq[0]=dnsmasq
dhcp.@dnsmasq[0].domainneeded='1'
dhcp.@dnsmasq[0].boguspriv='1'
dhcp.@dnsmasq[0].filterwin2k='0'
dhcp.@dnsmasq[0].localise_queries='1'
dhcp.@dnsmasq[0].rebind_protection='1'
dhcp.@dnsmasq[0].rebind_localhost='1'
dhcp.@dnsmasq[0].local='/lan/'
dhcp.@dnsmasq[0].domain='lan'
dhcp.@dnsmasq[0].expandhosts='1'
dhcp.@dnsmasq[0].nonegcache='0'
dhcp.@dnsmasq[0].cachesize='1000'
dhcp.@dnsmasq[0].authoritative='1'
dhcp.@dnsmasq[0].readethers='1'
dhcp.@dnsmasq[0].leasefile='/tmp/dhcp.leases'
dhcp.@dnsmasq[0].resolvfile='/tmp/resolv.conf.d/resolv.conf.auto'
dhcp.@dnsmasq[0].localservice='1'
dhcp.@dnsmasq[0].ednspacket_max='1232'
dhcp.@dnsmasq[0].filter_aaaa='0'
dhcp.@dnsmasq[0].filter_a='0'
dhcp.@dnsmasq[0].logdhcp='1'
dhcp.@dnsmasq[0].enable_tftp='1'
dhcp.@dnsmasq[0].tftp_root='/www'
dhcp.lan=dhcp
dhcp.lan.interface='lan'
dhcp.lan.start='100'
dhcp.lan.limit='150'
dhcp.lan.leasetime='12h'
dhcp.lan.dhcpv4='server'
dhcp.lan.dhcpv6='disabled'
dhcp.lan.ra='disabled'
dhcp.lan.ra_slaac='1'
dhcp.lan.ra_flags='managed-config' 'other-config'
dhcp.lan.ndp='disabled'
dhcp.wan=dhcp
dhcp.wan.interface='wan'
dhcp.wan.ignore='1'
dhcp.odhcpd=odhcpd
dhcp.odhcpd.leasefile='/tmp/odhcpd.leases'
dhcp.odhcpd.leasetrigger='/usr/sbin/odhcpd-update'
dhcp.odhcpd.loglevel='4'
dhcp.odhcpd.piodir='/tmp/odhcpd-piodir'
dhcp.odhcpd.hostsdir='/tmp/hosts'

dhcp.deadgateway=tag
dhcp.deadgateway.dhcp_option='3,10.0.0.254'
dhcp.@host[0]=host
dhcp.@host[0].mac='de:ad:be:ef:*:*'
dhcp.@host[0].tag='deadgateway'
```

I’m going to test if the line

```
dhcp-host=de:ad:be:ef:*:*,set:deadgateway
```

even is valid 

first I try injecting the known good setting and testing that I can restart dnsmasq without re-writing the file

```
root@router:~# echo dhcp-host=de:ad:be:ef:*:*,set:deadgateway,placeholdername >> /tmp/etc/dnsmasq.conf.cfg01411c
```

reload the config without restarting

```
root@router:~# ps | grep dnsmasq
24422 root      2964 S    {dnsmasq} /sbin/ujail -t 5 -n dnsmasq -u -l -r /bin/ubus -r /etc/TZ -r /etc/dnsmasq.conf -r /etc/ethers -r /etc/group -r /etc/hosts -r /etc/passwd -w /tmp/dhcp.leases -r /tmp/dnsmasq.cfg01411c.d -r /tmp/hosts -r /tmp/resolv.conf.d -r
24435 dnsmasq   1808 S    /usr/sbin/dnsmasq -C /var/etc/dnsmasq.conf.cfg01411c -k -x /var/run/dnsmasq/dnsmasq.cfg01411c.pid
24481 root      1428 S    grep dnsmasq
root@router:~#
root@router:~# kill -HUP 24435
root@router:~#
```

logread

```
Wed Jan  7 12:04:43 2026 daemon.info dnsmasq[1]: read /etc/hosts - 12 names
Wed Jan  7 12:04:43 2026 daemon.info dnsmasq[1]: read /tmp/hosts/dhcp.cfg01411c - 4 names
Wed Jan  7 12:04:43 2026 daemon.info dnsmasq-dhcp[1]: read /etc/ethers - 0 addresses
```

Ok,looks like it reloaded without rewriting the config file !

```
root@router:~# cat /tmp/etc/dnsmasq.conf.cfg01411c | grep dhcp-host
dhcp-host=de:ad:be:ef:*:*,set:deadgateway,placeholdername
root@router:~# cat /tmp/etc/dnsmasq.conf.cfg01411c | grep dhcp-option
dhcp-option=tag:deadgateway,3,10.0.0.254
root@router:~#
```

And ahhh, hum, that doesn’t work, it really should have ….

![image|690x446](upload://fvsc0Q1JTZqVPoaQZfoj0qUh6bT.jpeg)

logread

```
Wed Jan  7 12:13:06 2026 daemon.info dnsmasq-dhcp[1]: 2606369005 available DHCP range: 10.0.0.100 -- 10.0.0.249
Wed Jan  7 12:13:06 2026 daemon.info dnsmasq-dhcp[1]: 2606369005 vendor class: MSFT 5.0
Wed Jan  7 12:13:06 2026 daemon.info dnsmasq-dhcp[1]: 2606369005 client provides name: wintest666
Wed Jan  7 12:13:06 2026 daemon.info dnsmasq-dhcp[1]: 2606369005 DHCPREQUEST(br-lan) 10.0.0.235 de:ad:be:ef:00:01
Wed Jan  7 12:13:06 2026 daemon.info dnsmasq-dhcp[1]: 2606369005 tags: lan, br-lan
Wed Jan  7 12:13:06 2026 daemon.info dnsmasq-dhcp[1]: 2606369005 DHCPACK(br-lan) 10.0.0.235 de:ad:be:ef:00:01 wintest666
Wed Jan  7 12:13:06 2026 daemon.info dnsmasq-dhcp[1]: 2606369005 requested options: 1:netmask, 3:router, 6:dns-server, 15:domain-name,
Wed Jan  7 12:13:06 2026 daemon.info dnsmasq-dhcp[1]: 2606369005 requested options: 31:router-discovery, 33:static-route, 43:vendor-encap,
Wed Jan  7 12:13:06 2026 daemon.info dnsmasq-dhcp[1]: 2606369005 requested options: 44:netbios-ns, 46:netbios-nodetype, 47:netbios-scope,
Wed Jan  7 12:13:06 2026 daemon.info dnsmasq-dhcp[1]: 2606369005 requested options: 119:domain-search, 121:classless-static-route,
Wed Jan  7 12:13:06 2026 daemon.info dnsmasq-dhcp[1]: 2606369005 requested options: 249, 252
Wed Jan  7 12:13:06 2026 daemon.info dnsmasq-dhcp[1]: 2606369005 next server: 10.0.0.1
Wed Jan  7 12:13:06 2026 daemon.info dnsmasq-dhcp[1]: 2606369005 sent size:  1 option: 53 message-type  5
Wed Jan  7 12:13:06 2026 daemon.info dnsmasq-dhcp[1]: 2606369005 sent size:  4 option: 54 server-identifier  10.0.0.1
Wed Jan  7 12:13:06 2026 daemon.info dnsmasq-dhcp[1]: 2606369005 sent size:  4 option: 51 lease-time  12h
Wed Jan  7 12:13:06 2026 daemon.info dnsmasq-dhcp[1]: 2606369005 sent size:  4 option: 58 T1  6h
Wed Jan  7 12:13:06 2026 daemon.info dnsmasq-dhcp[1]: 2606369005 sent size:  4 option: 59 T2  10h30m
Wed Jan  7 12:13:06 2026 daemon.info dnsmasq-dhcp[1]: 2606369005 sent size:  4 option:  1 netmask  255.255.0.0
Wed Jan  7 12:13:06 2026 daemon.info dnsmasq-dhcp[1]: 2606369005 sent size:  4 option: 28 broadcast  10.0.255.255
Wed Jan  7 12:13:06 2026 daemon.info dnsmasq-dhcp[1]: 2606369005 sent size:  4 option:  3 router  10.0.0.1
Wed Jan  7 12:13:06 2026 daemon.info dnsmasq-dhcp[1]: 2606369005 sent size:  4 option:  6 dns-server  10.0.0.1
Wed Jan  7 12:13:06 2026 daemon.info dnsmasq-dhcp[1]: 2606369005 sent size:  3 option: 15 domain-name  lan
Wed Jan  7 12:13:06 2026 daemon.info dnsmasq-dhcp[1]: 2606369005 sent size: 17 option: 81 FQDN  03:ff:ff:77:69:6e:74:65:73:74:36:36:36:2e...
```

tcpdump

```
12:13:06.125326 IP (tos 0x0, ttl 128, id 57095, offset 0, flags [none], proto UDP (17), length 340)
    0.0.0.0.68 > 255.255.255.255.67: [udp sum ok] BOOTP/DHCP, Request from de:ad:be:ef:00:01, length 312, xid 0x9b5a08ed, Flags [none] (0x0000)
          Client-Ethernet-Address de:ad:be:ef:00:01
          Vendor-rfc1048 Extensions
            Magic Cookie 0x63825363
            DHCP-Message (53), length 1: Request
            Client-ID (61), length 7: ether de:ad:be:ef:00:01
            Requested-IP (50), length 4: 10.0.0.235
            Hostname (12), length 10: "wintest666"
            FQDN (81), length 13: "wintest666"
            Vendor-Class (60), length 8: "MSFT 5.0"
            Parameter-Request (55), length 14:
              Subnet-Mask (1), Default-Gateway (3), Domain-Name-Server (6), Domain-Name (15)
              Router-Discovery (31), Static-Route (33), Vendor-Option (43), Netbios-Name-Server (44)
              Netbios-Node (46), Netbios-Scope (47), Unknown (119), Classless-Static-Route (121)
              Classless-Static-Route-Microsoft (249), Unknown (252)
            END (255), length 0
12:13:06.135716 IP (tos 0xc0, ttl 64, id 63374, offset 0, flags [none], proto UDP (17), length 344)
    10.0.0.1.67 > 10.0.0.235.68: [bad udp cksum 0x1641 -> 0x57fd!] BOOTP/DHCP, Reply, length 316, xid 0x9b5a08ed, Flags [none] (0x0000)
          Your-IP 10.0.0.235
          Server-IP 10.0.0.1
          Client-Ethernet-Address de:ad:be:ef:00:01
          Vendor-rfc1048 Extensions
            Magic Cookie 0x63825363
            DHCP-Message (53), length 1: ACK
            Server-ID (54), length 4: 10.0.0.1
            Lease-Time (51), length 4: 43200
            RN (58), length 4: 21600
            RB (59), length 4: 37800
            Subnet-Mask (1), length 4: 255.255.0.0
            BR (28), length 4: 10.0.255.255
            Default-Gateway (3), length 4: 10.0.0.1
            Domain-Name-Server (6), length 4: 10.0.0.1
            Domain-Name (15), length 3: "lan"
            FQDN (81), length 17: [SO] 255/255 "wintest666.lan"
            END (255), length 0
```

Ok, well, no, turns out you cannot use kill -HUP to reload config file !?

So I still don’t know if this syntax is legal

```
dhcp-host=de:ad:be:ef:*:*,set:deadgateway
```

in place of 

```
dhcp-host=de:ad:be:ef:*:*,set:deadgateway,placeholdername
```

And I don’t know why dhcp_host_add still does not produce that dhcp-host line despite the modification

-------------------------

shodanx | 2026-01-07 18:06:59 UTC | #27

Ok found why 

Then this line runs

```
[ -z "$ip" ] && [ -z "$name" ] && [ -z "$hostid" ] && [ -z "$mac" ] && return 0
```

the $mac variable has not yet been set !

![image|640x500](upload://hRdqsmvj3yh6mDvfY2tGy06xSEO.png)

So I will make a command to move both mac and duid before the check

and also I will add $duid to the check

Ok so

first remove the old variable check line

```
sed -i '/\[ -z "\$ip" \] && \[ -z "\$name" \] && \[ -z "\$hostid" \] && return 0/d' /etc/init.d/dnsmasq
```

then remove the two old config mac & duid lines

```
sed -i '/^[[:space:]]*config_get \(mac\|duid\) "\$cfg" \(mac\|duid\)/d' /etc/init.d/dnsmasq
```

then add config mac after config hostid

```
sed -i '/config_get hostid "\$cfg" hostid/a\        config_get mac "$cfg" mac' /etc/init.d/dnsmasq
```

then add config duid after that

```
sed -i '/config_get mac "\$cfg" mac/a\        config_get duid "$cfg" duid' /etc/init.d/dnsmasq
```

then add the new modified variable check

`sed -i '/config_get duid "$cfg" duid/a\        [ -z "$ip" ] && [ -z "$name" ] && [ -z "$hostid" ] && [ -z "$mac" ] && [ -z "$duid" ] && return 0' /etc/init.d/dnsmasq`

and check 

`grep -A10 'config_get name "$cfg" name' /etc/init.d/dnsmasq`

Put all of that together you get

```
root@router:~# grep -A14 'config_get name "$cfg" name' /etc/init.d/dnsmasq
        config_get name "$cfg" name
        config_get ip "$cfg" ip
        config_get hostid "$cfg" hostid

        [ -z "$ip" ] && [ -z "$name" ] && [ -z "$hostid" ] && return 0

        config_get_bool dns "$cfg" dns 0
        [ "$dns" = "1" ] && [ -n "$ip" ] && [ -n "$name" ] && {
                echo "$ip $name${DOMAIN:+.$DOMAIN}" >> "$HOSTFILE_TMP"
        }

        config_get mac "$cfg" mac
        config_get duid "$cfg" duid
        config_get tag "$cfg" tag

root@router:~# sed -i '/\[ -z "\$ip" \] && \[ -z "\$name" \] && \[ -z "\$hostid" \] && return 0/d' /etc/init.d/dnsmasq
root@router:~# sed -i '/^[[:space:]]*config_get \(mac\|duid\) "\$cfg" \(mac\|duid\)/d' /etc/init.d/dnsmasq
root@router:~# sed -i '/config_get hostid "\$cfg" hostid/a\        config_get mac "$cfg" mac' /etc/init.d/dnsmasq
root@router:~# sed -i '/config_get mac "\$cfg" mac/a\        config_get duid "$cfg" duid' /etc/init.d/dnsmasq
root@router:~# sed -i '/config_get duid "$cfg" duid/a\        [ -z "$ip" ] && [ -z "$name" ] && [ -z "$hostid" ] && [ -z "$mac" ] && [ -z "$duid" ] && return 0' /etc/init.d/dnsmasq
root@router:~# grep -A10 'config_get name "$cfg" name' /etc/init.d/dnsmasq
        config_get name "$cfg" name
        config_get ip "$cfg" ip
        config_get hostid "$cfg" hostid
        config_get mac "$cfg" mac
        config_get duid "$cfg" duid
        [ -z "$ip" ] && [ -z "$name" ] && [ -z "$hostid" ] && [ -z "$mac" ] && [ -z "$duid" ] && return 0


        config_get_bool dns "$cfg" dns 0
        [ "$dns" = "1" ] && [ -n "$ip" ] && [ -n "$name" ] && {
                echo "$ip $name${DOMAIN:+.$DOMAIN}" >> "$HOSTFILE_TMP"
root@router:~#
```

Looks good

![image|690x415](upload://afzxHEZARGJx2Hdun7D5dVDXyjF.png)

All these commands again in one pastable block

```
grep -A10 'config_get name "$cfg" name' /etc/init.d/dnsmasqsed -i '/\[ -z "\$ip" \] && \[ -z "\$name" \] && \[ -z "\$hostid" \] && return 0/d' /etc/init.d/dnsmasq
sed -i '/^[[:space:]]*config_get \(mac\|duid\) "\$cfg" \(mac\|duid\)/d' /etc/init.d/dnsmasq
sed -i '/config_get hostid "\$cfg" hostid/a\        config_get mac "$cfg" mac' /etc/init.d/dnsmasq
sed -i '/config_get mac "\$cfg" mac/a\        config_get duid "$cfg" duid' /etc/init.d/dnsmasq
sed -i '/config_get duid "$cfg" duid/a\        [ -z "$ip" ] && [ -z "$name" ] && [ -z "$hostid" ] && [ -z "$mac" ] && [ -z "$duid" ] && return 0' /etc/init.d/dnsmasq
grep -A10 'config_get name "$cfg" name' /etc/init.d/dnsmasq
```

Next testing…

-------------------------

shodanx | 2026-01-07 18:52:38 UTC | #28

First remove “placeholdername” from luci

![image|690x100](upload://yUdR1dv7qFqPuBmFdP2DxThog8Q.png)

![image|690x177](upload://u6t3ITuPn6OSnvH219h6fEnmNJ5.png)

dnsmasq temp config file

```
root@router:~# cat /tmp/etc/dnsmasq.conf.cfg01411c | grep dhcp-host
dhcp-host=de:ad:be:ef:*:*,set:deadgateway
root@router:~# cat /tmp/etc/dnsmasq.conf.cfg01411c | grep dhcp-option
dhcp-option=tag:deadgateway,3,10.0.0.254
root@router:~#
```

looks good !

rebooting VM…

logread

```
Wed Jan  7 13:06:59 2026 daemon.info dnsmasq-dhcp[1]: 806754415 available DHCP range: 10.0.0.100 -- 10.0.0.249
Wed Jan  7 13:06:59 2026 daemon.info dnsmasq-dhcp[1]: 806754415 vendor class: MSFT 5.0
Wed Jan  7 13:06:59 2026 daemon.info dnsmasq-dhcp[1]: 806754415 client provides name: wintest666
Wed Jan  7 13:06:59 2026 daemon.info dnsmasq-dhcp[1]: 806754415 DHCPREQUEST(br-lan) 10.0.0.235 de:ad:be:ef:00:01
Wed Jan  7 13:06:59 2026 daemon.info dnsmasq-dhcp[1]: 806754415 tags: lan, deadgateway, known, br-lan
Wed Jan  7 13:06:59 2026 daemon.info dnsmasq-dhcp[1]: 806754415 DHCPACK(br-lan) 10.0.0.235 de:ad:be:ef:00:01 wintest666
Wed Jan  7 13:06:59 2026 daemon.info dnsmasq-dhcp[1]: 806754415 requested options: 1:netmask, 3:router, 6:dns-server, 15:domain-name,
Wed Jan  7 13:06:59 2026 daemon.info dnsmasq-dhcp[1]: 806754415 requested options: 31:router-discovery, 33:static-route, 43:vendor-encap,
Wed Jan  7 13:06:59 2026 daemon.info dnsmasq-dhcp[1]: 806754415 requested options: 44:netbios-ns, 46:netbios-nodetype, 47:netbios-scope,
Wed Jan  7 13:06:59 2026 daemon.info dnsmasq-dhcp[1]: 806754415 requested options: 119:domain-search, 121:classless-static-route,
Wed Jan  7 13:06:59 2026 daemon.info dnsmasq-dhcp[1]: 806754415 requested options: 249, 252
Wed Jan  7 13:06:59 2026 daemon.info dnsmasq-dhcp[1]: 806754415 next server: 10.0.0.1
Wed Jan  7 13:06:59 2026 daemon.info dnsmasq-dhcp[1]: 806754415 sent size:  1 option: 53 message-type  5
Wed Jan  7 13:06:59 2026 daemon.info dnsmasq-dhcp[1]: 806754415 sent size:  4 option: 54 server-identifier  10.0.0.1
Wed Jan  7 13:06:59 2026 daemon.info dnsmasq-dhcp[1]: 806754415 sent size:  4 option: 51 lease-time  12h
Wed Jan  7 13:06:59 2026 daemon.info dnsmasq-dhcp[1]: 806754415 sent size:  4 option: 58 T1  6h
Wed Jan  7 13:06:59 2026 daemon.info dnsmasq-dhcp[1]: 806754415 sent size:  4 option: 59 T2  10h30m
Wed Jan  7 13:06:59 2026 daemon.info dnsmasq-dhcp[1]: 806754415 sent size:  4 option:  1 netmask  255.255.0.0
Wed Jan  7 13:06:59 2026 daemon.info dnsmasq-dhcp[1]: 806754415 sent size:  4 option: 28 broadcast  10.0.255.255
Wed Jan  7 13:06:59 2026 daemon.info dnsmasq-dhcp[1]: 806754415 sent size:  4 option:  6 dns-server  10.0.0.1
Wed Jan  7 13:06:59 2026 daemon.info dnsmasq-dhcp[1]: 806754415 sent size:  3 option: 15 domain-name  lan
Wed Jan  7 13:06:59 2026 daemon.info dnsmasq-dhcp[1]: 806754415 sent size: 17 option: 81 FQDN  03:ff:ff:77:69:6e:74:65:73:74:36:36:36:2e...
Wed Jan  7 13:06:59 2026 daemon.info dnsmasq-dhcp[1]: 806754415 sent size:  4 option:  3 router  10.0.0.254
```

tcpdump

```
13:06:59.215116 IP (tos 0x0, ttl 128, id 65053, offset 0, flags [none], proto UDP (17), length 340)
    0.0.0.0.68 > 255.255.255.255.67: [udp sum ok] BOOTP/DHCP, Request from de:ad:be:ef:00:01, length 312, xid 0x3016186f, Flags [none] (0x0000)
          Client-Ethernet-Address de:ad:be:ef:00:01
          Vendor-rfc1048 Extensions
            Magic Cookie 0x63825363
            DHCP-Message (53), length 1: Request
            Client-ID (61), length 7: ether de:ad:be:ef:00:01
            Requested-IP (50), length 4: 10.0.0.235
            Hostname (12), length 10: "wintest666"
            FQDN (81), length 13: "wintest666"
            Vendor-Class (60), length 8: "MSFT 5.0"
            Parameter-Request (55), length 14:
              Subnet-Mask (1), Default-Gateway (3), Domain-Name-Server (6), Domain-Name (15)
              Router-Discovery (31), Static-Route (33), Vendor-Option (43), Netbios-Name-Server (44)
              Netbios-Node (46), Netbios-Scope (47), Unknown (119), Classless-Static-Route (121)
              Classless-Static-Route-Microsoft (249), Unknown (252)
            END (255), length 0
13:06:59.225554 IP (tos 0xc0, ttl 64, id 28701, offset 0, flags [none], proto UDP (17), length 344)
    10.0.0.1.67 > 10.0.0.235.68: [bad udp cksum 0x1641 -> 0xb6be!] BOOTP/DHCP, Reply, length 316, xid 0x3016186f, Flags [none] (0x0000)
          Your-IP 10.0.0.235
          Server-IP 10.0.0.1
          Client-Ethernet-Address de:ad:be:ef:00:01
          Vendor-rfc1048 Extensions
            Magic Cookie 0x63825363
            DHCP-Message (53), length 1: ACK
            Server-ID (54), length 4: 10.0.0.1
            Lease-Time (51), length 4: 43200
            RN (58), length 4: 21600
            RB (59), length 4: 37800
            Subnet-Mask (1), length 4: 255.255.0.0
            BR (28), length 4: 10.0.255.255
            Domain-Name-Server (6), length 4: 10.0.0.1
            Domain-Name (15), length 3: "lan"
            FQDN (81), length 17: [SO] 255/255 "wintest666.lan"
            Default-Gateway (3), length 4: 10.0.0.254
            END (255), length 0
```

Result

![image|491x500](upload://dM1Tsw6IBAvkukpIX4ntQ4ONg5U.jpeg)

Ok, that’s a bingo

-------------------------

Ityns | 2026-01-07 22:44:05 UTC | #29

![1|690x193](upload://yavL86v94QdzjLS7j1rCmYV9P5O.png)

![2|690x111](upload://teV1rC8ESy4q5P1ySmJ8V2ayXYp.png)

It seems these descriptions cannot be translated right now as they’re absent from translation files.

-------------------------

systemcrash | 2026-01-08 13:12:56 UTC | #30

That’s fine - they might need some adjustment. Either shortening or improving. Tags are not the easiest thing to explain. The strings will appear in a future refresh.

-------------------------