Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Enable DHCP only on LAN IN

    Scheduled Pinned Locked Moved DHCP and DNS
    15 Posts 2 Posters 951 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • L
      LohanDett @johnpoz
      last edited by LohanDett

      @johnpoz Can't figure out how.. I created a vlan and assigned it as another interface but couldn't select it in dhcp server config though it has a static local ipv4.

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by johnpoz

        did you enable dhcp server on it?

        Any interface is NOT a wan, ie doesn't have a gateway set and has a static IP on it be native or vlan will be listed as being able to have dhcpd enabled or not.

        interfaces.png

        Two of those W_ interfaces are vlans.
        vlans.png

        Did you actually "enable" the interface ;)

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        L 1 Reply Last reply Reply Quote 0
        • L
          LohanDett @johnpoz
          last edited by LohanDett

          @johnpoz Doesn't work for me:
          vlans.JPG
          --------------------------------------------------------------------------------------------------------------
          dhcp-server.JPG

          Guess I missed a configuration but this is looking pretty similar to yours.
          .
          .
          .

          Well, I guessed I messed up something anyways, can't connect to firewall services through VPN anymore (is dhcp required for this?).

          1 Reply Last reply Reply Quote 0
          • L
            LohanDett
            last edited by

            If I manually type the iface name in the url it's working. Maybe this is just a bug in dev branche version?

            1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator
              last edited by johnpoz

              And your opt1 interface is actually "enabled" you can put an IP on it without actually clicking "enable" show us your opt1 interface.

              Your running 2.5 ver - then you post should be in that section

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              L 1 Reply Last reply Reply Quote 0
              • L
                LohanDett @johnpoz
                last edited by

                @johnpoz LAN ip is 192.168.1.1 if that's relevant, dunno..

                opt1-in.JPG

                Thanks for your help.

                1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator
                  last edited by johnpoz

                  Well I can tell you the mask is wrong.. You can not run dhcpd when the mask is /32 there is no range to use - you prob want that at /24

                  mask.png

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  L 1 Reply Last reply Reply Quote 1
                  • L
                    LohanDett @johnpoz
                    last edited by

                    @johnpoz Indeed, that was the trick. Thank you so much, I didn't notice that it was set wrong.

                    Now I can block traffic to WAN and stop it going out of the network.

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator
                      last edited by

                      Not really a "trick" but yeah setting /32 for sure not going to allow you to run dhcpd ;)

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      L 1 Reply Last reply Reply Quote 1
                      • L
                        LohanDett @johnpoz
                        last edited by LohanDett

                        @johnpoz Yh no magic. 🤣
                        dhcp_inside_lan.JPG
                        This would block dhcp traffic from going out and keep it inside that vlan? Sry for that dumb question, used to have different nic's before for this, haven't really worked with vlans before.

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.