Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Plan to change LAN subnet

    Scheduled Pinned Locked Moved General pfSense Questions
    22 Posts 7 Posters 2.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • JKnottJ
      JKnott @coffeecup25
      last edited by

      @coffeecup25 said in Plan to change LAN subnet:

      I want to renumber my home subnet from 192.168.1.0/24 to something else in that class, such as 192.168.xxx.0/24.

      I had the same problem and moved my LAN to 172.16.0.0. I have only once seen anything in the 172.16.0.0 /12 range used elsewhere.

      The only real hitch is that all of my home devices have static IP addresses. It's easier to keep track of what's attached to the network in this way.

      You might want to use static maps, so that the DHCP server always assigns the same IP address to a MAC address. On my network, only my main desktop and pfSense router have static configs. Everything else uses mapped addresses.

      PfSense running on Qotom mini PC
      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
      UniFi AC-Lite access point

      I haven't lost my mind. It's around here...somewhere...

      1 Reply Last reply Reply Quote 0
      • C
        coffeecup25
        last edited by coffeecup25

        Thanks, all. I just finished. It was a minor pita, but not too bad overall.

        The new range was researched using Google. It appears to be unused as a company standard default.

        1. make sure at least 1 pc does not have a static mapping to old IP range
        2. reset to new LAN ip on console
        3. Yes to DHCP and assign reserved pool
        4. reboot router (seemed important, didn't work first time)
        5. log into pfSense. Renumber static mappings (I had 38. It took only a few minutes.)
        6. Some devices came up without a reboot. Tivo was a little finicky. I had to reset the DVR manually and reboot all the minis. The NAS and all access points needed a reboot.

        Edit: A couple of later issues that needed to be resolved

        1. Nightly sync from home server to QNAP NAS failed. It was a weird user authority issue. Folders that previously coped new and changed items and deleted items on QNAP with no match had no authority to access QNAP folders. After numerous attempts to fix it easily, the only solution was to delete and rewrite the backup folders on QNAP. (This was only a nuisance because the QNAP backs up later at night to a couple of USB drives so no data was lost.)

        2. Just to avoid problems, an automated Acronis backup to QNAP was rebuilt.

        1 Reply Last reply Reply Quote 0
        • chpalmerC
          chpalmer
          last edited by chpalmer

          @coffeecup25 said in Plan to change LAN subnet:

          The new range was researched using Google. It appears to be unused as a company standard default

          Yep.. Nothing is ever wrong on the internet.. ๐Ÿ™„

          That is a scary comment.. You need to use private IP space if you don't want any gottchas down the road.

          10.0.0.0/8
          172.16.0.0/12
          192.168.0.0/16

          172.20.1.1/24 is one I use at a client site..

          VOIP for one is easily broke by using a publicly route-able address as your LAN.

          Triggering snowflakes one by one..
          Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

          C 1 Reply Last reply Reply Quote 0
          • C
            coffeecup25 @chpalmer
            last edited by

            @chpalmer Google know this. It's pretty smart.

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              What is the range you're using? If it's internal it's not like anyone can connect to it, there's no danger in telling us.

              Steve

              C 1 Reply Last reply Reply Quote 0
              • C
                coffeecup25 @stephenw10
                last edited by

                @stephenw10 said in Plan to change LAN subnet:

                What is the range you're using? If it's internal it's not like anyone can connect to it, there's no danger in telling us.

                Steve

                192.168.xxx.0/24

                xxx took some research to find one that was not on Google as a default that some company uses or has ever used. I don't want to jinx it as it was a minor pita to change it. I stayed in the 192.168.xxx.0/24 range to make the changeover easy on myself. If I ever have to do it again, I'll figure out something obscure in the 10.0.0.0/8 range.

                stephenw10S 1 Reply Last reply Reply Quote 0
                • chpalmerC
                  chpalmer
                  last edited by

                  LOL Even the great Google is wrong sometimes. ๐Ÿ˜œ

                  Triggering snowflakes one by one..
                  Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                  C 1 Reply Last reply Reply Quote 0
                  • C
                    coffeecup25 @chpalmer
                    last edited by

                    @chpalmer said in Plan to change LAN subnet:

                    LOL Even the great Google is wrong sometimes. ๐Ÿ˜œ

                    Sometimes you have to live dangerously.

                    1 Reply Last reply Reply Quote 0
                    • chpalmerC
                      chpalmer
                      last edited by

                      But setting yourself up to drive over the edge when all you want is a shorter car..

                      172.31.125.0/24
                      172.19.1.0/25
                      192.168.25.0/24
                      10.10.10.0/28

                      Just some of my networks. Try and hack me! :)

                      Triggering snowflakes one by one..
                      Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                      C 1 Reply Last reply Reply Quote 0
                      • C
                        coffeecup25 @chpalmer
                        last edited by

                        @chpalmer said in Plan to change LAN subnet:

                        But setting yourself up to drive over the edge when all you want is a shorter car..

                        172.31.125.0/24
                        172.19.1.0/25
                        192.168.25.0/24
                        10.10.10.0/28

                        Just some of my networks. Try and hack me! :)

                        I know what a non-routable IP address is. If you can't tell by what I wrote, you must need a refresher consulting class.

                        JKnottJ 1 Reply Last reply Reply Quote 0
                        • chpalmerC
                          chpalmer
                          last edited by

                          I simply find it funny when someone will not show their LAN addresses online.

                          Nope. I cannot see your knowledge or experience from here and can only assume by what you post.

                          Good Luck!

                          Triggering snowflakes one by one..
                          Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                          1 Reply Last reply Reply Quote 0
                          • JKnottJ
                            JKnott @coffeecup25
                            last edited by

                            @coffeecup25 said in Plan to change LAN subnet:

                            I know what a non-routable IP address is. If you can't tell by what I wrote, you must need a refresher consulting class.

                            Actually, they are routeable. They're just not allowed on the Internet. With your VPN, you are routing those private addresses.

                            PfSense running on Qotom mini PC
                            i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                            UniFi AC-Lite access point

                            I haven't lost my mind. It's around here...somewhere...

                            1 Reply Last reply Reply Quote 0
                            • johnpozJ
                              johnpoz LAYER 8 Global Moderator
                              last edited by

                              @JKnott said in Plan to change LAN subnet:

                              Actually, they are routeable. They're just not allowed on the Internet

                              correct.jpg

                              Hehehe couldn't help myself sorry... Good one @JKnott

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 24.11 | Lab VMs 2.8, 24.11

                              chpalmerC 1 Reply Last reply Reply Quote 0
                              • chpalmerC
                                chpalmer @johnpoz
                                last edited by

                                @johnpoz said in Plan to change LAN subnet:

                                @JKnott said in Plan to change LAN subnet:

                                Actually, they are routeable. They're just not allowed on the Internet

                                correct.jpg

                                Hehehe couldn't help myself sorry... Good one @JKnott

                                LOL.. Yep Got me on a technicality. Because I do route them all over my VPN's I should know better. :)

                                Triggering snowflakes one by one..
                                Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                                1 Reply Last reply Reply Quote 0
                                • stephenw10S
                                  stephenw10 Netgate Administrator @coffeecup25
                                  last edited by

                                  192.168.xxx.0/24

                                  xxx took some research to find one that was not on Google as a default that some company uses or has ever used.

                                  Ah I see what you mean now. That's obviously fine. โ˜บ

                                  It's very hard to judge peoples level of experience based only on a few forum posts. Which can easily lead to either coming across incredibly patronising or totally incomprehensible. I've done both!
                                  I had visions that you might be just using some random public subnet based on a Google search. Glad to see you're not. ๐Ÿ˜‰

                                  Steve

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.