Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Plan to change LAN subnet

    Scheduled Pinned Locked Moved General pfSense Questions
    22 Posts 7 Posters 2.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • jahonixJ
      jahonix
      last edited by

      This post is deleted!
      1 Reply Last reply Reply Quote 0
      • NogBadTheBadN
        NogBadTheBad @johnpoz
        last edited by

        This post is deleted!
        1 Reply Last reply Reply Quote 0
        • JKnottJ
          JKnott @coffeecup25
          last edited by

          @coffeecup25 said in Plan to change LAN subnet:

          I want to renumber my home subnet from 192.168.1.0/24 to something else in that class, such as 192.168.xxx.0/24.

          I had the same problem and moved my LAN to 172.16.0.0. I have only once seen anything in the 172.16.0.0 /12 range used elsewhere.

          The only real hitch is that all of my home devices have static IP addresses. It's easier to keep track of what's attached to the network in this way.

          You might want to use static maps, so that the DHCP server always assigns the same IP address to a MAC address. On my network, only my main desktop and pfSense router have static configs. Everything else uses mapped addresses.

          PfSense running on Qotom mini PC
          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
          UniFi AC-Lite access point

          I haven't lost my mind. It's around here...somewhere...

          1 Reply Last reply Reply Quote 0
          • C
            coffeecup25
            last edited by coffeecup25

            Thanks, all. I just finished. It was a minor pita, but not too bad overall.

            The new range was researched using Google. It appears to be unused as a company standard default.

            1. make sure at least 1 pc does not have a static mapping to old IP range
            2. reset to new LAN ip on console
            3. Yes to DHCP and assign reserved pool
            4. reboot router (seemed important, didn't work first time)
            5. log into pfSense. Renumber static mappings (I had 38. It took only a few minutes.)
            6. Some devices came up without a reboot. Tivo was a little finicky. I had to reset the DVR manually and reboot all the minis. The NAS and all access points needed a reboot.

            Edit: A couple of later issues that needed to be resolved

            1. Nightly sync from home server to QNAP NAS failed. It was a weird user authority issue. Folders that previously coped new and changed items and deleted items on QNAP with no match had no authority to access QNAP folders. After numerous attempts to fix it easily, the only solution was to delete and rewrite the backup folders on QNAP. (This was only a nuisance because the QNAP backs up later at night to a couple of USB drives so no data was lost.)

            2. Just to avoid problems, an automated Acronis backup to QNAP was rebuilt.

            1 Reply Last reply Reply Quote 0
            • chpalmerC
              chpalmer
              last edited by chpalmer

              @coffeecup25 said in Plan to change LAN subnet:

              The new range was researched using Google. It appears to be unused as a company standard default

              Yep.. Nothing is ever wrong on the internet.. ๐Ÿ™„

              That is a scary comment.. You need to use private IP space if you don't want any gottchas down the road.

              10.0.0.0/8
              172.16.0.0/12
              192.168.0.0/16

              172.20.1.1/24 is one I use at a client site..

              VOIP for one is easily broke by using a publicly route-able address as your LAN.

              Triggering snowflakes one by one..
              Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

              C 1 Reply Last reply Reply Quote 0
              • C
                coffeecup25 @chpalmer
                last edited by

                @chpalmer Google know this. It's pretty smart.

                1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  What is the range you're using? If it's internal it's not like anyone can connect to it, there's no danger in telling us.

                  Steve

                  C 1 Reply Last reply Reply Quote 0
                  • C
                    coffeecup25 @stephenw10
                    last edited by

                    @stephenw10 said in Plan to change LAN subnet:

                    What is the range you're using? If it's internal it's not like anyone can connect to it, there's no danger in telling us.

                    Steve

                    192.168.xxx.0/24

                    xxx took some research to find one that was not on Google as a default that some company uses or has ever used. I don't want to jinx it as it was a minor pita to change it. I stayed in the 192.168.xxx.0/24 range to make the changeover easy on myself. If I ever have to do it again, I'll figure out something obscure in the 10.0.0.0/8 range.

                    stephenw10S 1 Reply Last reply Reply Quote 0
                    • chpalmerC
                      chpalmer
                      last edited by

                      LOL Even the great Google is wrong sometimes. ๐Ÿ˜œ

                      Triggering snowflakes one by one..
                      Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                      C 1 Reply Last reply Reply Quote 0
                      • C
                        coffeecup25 @chpalmer
                        last edited by

                        @chpalmer said in Plan to change LAN subnet:

                        LOL Even the great Google is wrong sometimes. ๐Ÿ˜œ

                        Sometimes you have to live dangerously.

                        1 Reply Last reply Reply Quote 0
                        • chpalmerC
                          chpalmer
                          last edited by

                          But setting yourself up to drive over the edge when all you want is a shorter car..

                          172.31.125.0/24
                          172.19.1.0/25
                          192.168.25.0/24
                          10.10.10.0/28

                          Just some of my networks. Try and hack me! :)

                          Triggering snowflakes one by one..
                          Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                          C 1 Reply Last reply Reply Quote 0
                          • C
                            coffeecup25 @chpalmer
                            last edited by

                            @chpalmer said in Plan to change LAN subnet:

                            But setting yourself up to drive over the edge when all you want is a shorter car..

                            172.31.125.0/24
                            172.19.1.0/25
                            192.168.25.0/24
                            10.10.10.0/28

                            Just some of my networks. Try and hack me! :)

                            I know what a non-routable IP address is. If you can't tell by what I wrote, you must need a refresher consulting class.

                            JKnottJ 1 Reply Last reply Reply Quote 0
                            • chpalmerC
                              chpalmer
                              last edited by

                              I simply find it funny when someone will not show their LAN addresses online.

                              Nope. I cannot see your knowledge or experience from here and can only assume by what you post.

                              Good Luck!

                              Triggering snowflakes one by one..
                              Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                              1 Reply Last reply Reply Quote 0
                              • JKnottJ
                                JKnott @coffeecup25
                                last edited by

                                @coffeecup25 said in Plan to change LAN subnet:

                                I know what a non-routable IP address is. If you can't tell by what I wrote, you must need a refresher consulting class.

                                Actually, they are routeable. They're just not allowed on the Internet. With your VPN, you are routing those private addresses.

                                PfSense running on Qotom mini PC
                                i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                UniFi AC-Lite access point

                                I haven't lost my mind. It's around here...somewhere...

                                1 Reply Last reply Reply Quote 0
                                • johnpozJ
                                  johnpoz LAYER 8 Global Moderator
                                  last edited by

                                  @JKnott said in Plan to change LAN subnet:

                                  Actually, they are routeable. They're just not allowed on the Internet

                                  correct.jpg

                                  Hehehe couldn't help myself sorry... Good one @JKnott

                                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                                  If you get confused: Listen to the Music Play
                                  Please don't Chat/PM me for help, unless mod related
                                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                                  chpalmerC 1 Reply Last reply Reply Quote 0
                                  • chpalmerC
                                    chpalmer @johnpoz
                                    last edited by

                                    @johnpoz said in Plan to change LAN subnet:

                                    @JKnott said in Plan to change LAN subnet:

                                    Actually, they are routeable. They're just not allowed on the Internet

                                    correct.jpg

                                    Hehehe couldn't help myself sorry... Good one @JKnott

                                    LOL.. Yep Got me on a technicality. Because I do route them all over my VPN's I should know better. :)

                                    Triggering snowflakes one by one..
                                    Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                                    1 Reply Last reply Reply Quote 0
                                    • stephenw10S
                                      stephenw10 Netgate Administrator @coffeecup25
                                      last edited by

                                      192.168.xxx.0/24

                                      xxx took some research to find one that was not on Google as a default that some company uses or has ever used.

                                      Ah I see what you mean now. That's obviously fine. โ˜บ

                                      It's very hard to judge peoples level of experience based only on a few forum posts. Which can easily lead to either coming across incredibly patronising or totally incomprehensible. I've done both!
                                      I had visions that you might be just using some random public subnet based on a Google search. Glad to see you're not. ๐Ÿ˜‰

                                      Steve

                                      1 Reply Last reply Reply Quote 0
                                      • First post
                                        Last post
                                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.