У вас в конфиге две ошибки. Причём первая настолько тупая, что даже стыдно в неё носом тыкать. Конфиг - не программа, у вас в итоге получается только одна опция classless-routes - ms-classless-static-routes (code 249).
но даже если исправить конфиг, и развести rfc3442-classless-static-routes, она у вас неправильно прописанная, так как rfc3442-classless-static-routes является ЗАМЕНОЙ option routers (code 33). В ней надо указвать и маршрут по умолчанию тоже.
# RFC 3442 classless static routes
option rfc3442-classless-static-routes code 121 = array of integer 8;
# MS classless static routes
option ms-classless-static-routes code 249 = array of unsigned integer 8;
shared-network darkdragon.lan {
authoritative;
option domain-name "darkdragon.lan";
option domain-search "ads.darkdragon.lan", "darkdragon.lan", "rootdir.org";
option ntp-servers time.darkdragon.lan;
option time-servers time.darkdragon.lan;
ddns-updates on;
ddns-domainname "darkdragon.lan";
ddns-hostname = host-decl-name;
update-static-leases off;
do-forward-updates off;
ignore client-updates;
# Known hosts / users GW / allow DDNS
group "containers" {
do-forward-updates on;
allow client-updates;
# D-Link DGS-1100-05
host DGS-1100-05 {
hardware ethernet 0c:b6:d2:a9:2c:00;
fixed-address sw0.darkdragon.lan;
}
# Static service hosts
host dc1 {
hardware ethernet 00:16:3e:93:c8:f9;
fixed-address dc1.darkdragon.lan;
}
host hosting64 {
hardware ethernet 00:16:3e:f2:16:94;
fixed-address hosting64.darkdragon.lan;
}
host mysql2 {
hardware ethernet 00:16:3e:dc:70:3f;
fixed-address mysql2.darkdragon.lan;
}
# Known hosts with less than necessary bindings
host buildbotw7 { hardware ethernet 08:00:27:42:C5:5A; }
host build-trusty32 { hardware ethernet 00:16:3e:69:05:85; }
host build-trusty64 { hardware ethernet 00:16:3e:6f:6a:48; }
host build-xenial64 { hardware ethernet 00:16:3e:46:22:91; }
host build-bionic64 { hardware ethernet 00:16:3e:e7:6a:de; }
}
# Known hosts / servers GW / DDNS
group "hosting" {
option routers vpn.darkdragon.lan;
option rfc3442-classless-static-routes
16, 77,50, 192,168,1,1,
0, 192,168,1,1
;
do-forward-updates on;
allow client-updates;
host pubserver64 {
hardware ethernet 00:16:3e:57:2b:72;
fixed-address pubserver64.darkdragon.lan;
}
host mc-sfs { hardware ethernet 00:16:3e:d9:23:f8; }
}
# Known hosts / users GW / no DDNS
group "default network" {
host daemon2 {
hardware ethernet 90:2b:34:37:d8:e4;
fixed-address daemon2.darkdragon.lan;
}
host daemon3-mac-cable {
hardware ethernet e8:03:9a:bd:10:a9;
fixed-address daemon3s.darkdragon.lan;
}
host daemon3-mac-wifi {
hardware ethernet e8:03:9a:c9:50:bb;
fixed-address daemon3s.darkdragon.lan;
}
}
# Known hosts / servers GW / no DDNS
group "vip-clients" {
option routers vpn.darkdragon.lan;
option rfc3442-classless-static-routes
16, 77,50, 192,168,1,1,
0, 192,168,1,1
;
host rclient-td { hardware ethernet 08:00:27:73:14:d1; }
host daemon4-HMP { hardware ethernet 10:c6:1f:0a:ca:4a; }
}
group "wrapped" {
host dlink-vpn {
hardware ethernet 1c:7e:e5:d1:83:3b;
fixed-address 192.168.19.2;
}
}
subnet 192.168.1.0 netmask 255.255.255.192 {
option broadcast-address 192.168.1.31;
option dhcp-server-identifier 192.168.1.12;
option domain-name-servers ns.darkdragon.lan;
#option netbios-name-servers ns.darkdragon.lan;
# MS-style routing table
option routers gw.darkdragon.lan; # Default route
option ms-classless-static-routes
16, 77,50, 192,168,1,1, # Route Starlink network block to Starlink
27, 74,63,187,64, 192,168,1,1 # Hazeron to the VPN
;
option rfc3442-classless-static-routes
16, 77,50, 192,168,1,1, # Route Starlink network block to Starlink
27, 74,63,187,64, 192,168,1,1, # Hazeron to the VPN
0, 192,168,1,2 # RFC routing is a replacement for option 33 (routers)
;
}
subnet 192.168.19.0 netmask 255.255.255.240 {
option routers 192.168.19.1;
option dhcp-server-identifier 192.168.19.1;
option domain-name-servers 192.168.19.1;
option broadcast-address 192.168.19.15;
}
pool {
# Range 20-27 is reserved for manual containers assignment.
range 192.168.1.28 192.168.1.62;
}
}