Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    How to configure DHCP Server to NOT assign a default gateway

    Scheduled Pinned Locked Moved DHCP and DNS
    19 Posts 9 Posters 20.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator
      last edited by

      Im sure if your hack works, it could be tweaked to align with standards..  There are couple of changes I make upon loading a new snap.. Just been too lazy to work out the details of how to get them put into the code myself.

      Someone had created a patch to get vnstat2 working, which I have to reapply on each new snap.  Also I am not a fan of the local-ttl of 1 for dnsmasq..  I just don't see the reason to have such low ttl on my dns records..  They rarely if ever change, so I change it to 86400 in the services.inc file.

      Would like to see this as option to set this to whatever you want, etc.  Just too lazy to submit the code required to make it happen ;)  I will get to it sooner or later..  But if you have worked out the changes required to give you a check box - seems you got most of the work done already..  Be a nice addition that multiple people might take advantage of.

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      1 Reply Last reply Reply Quote 0
      • DerelictD
        Derelict LAYER 8 Netgate
        last edited by

        Has this been formally submitted as an enhancement request?  A search on redmine for dhcp "default gateway" doesn't show one.

        My scenario is I would like to NOT have a default gateway assigned to my workstation when I obtain a DHCP lease on my management VLAN. All I need is an interface on the right network.  All traffic not to the management VLAN should be routed out my main interface.

        It would be nice to be able to suppress DNS Server assignment in the same fashion.

        Chattanooga, Tennessee, USA
        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
        Do Not Chat For Help! NO_WAN_EGRESS(TM)

        1 Reply Last reply Reply Quote 0
        • jimpJ
          jimp Rebel Alliance Developer Netgate
          last edited by

          There isn't a feature request for it that I've seen, but I have seen at least one other person ask for it. In order to not break anyone's existing installs, another option or keyword would need to be added.

          So either:
          1. A checkbox to suppress sending a gateway
          or
          2. Entering the word "none" into the gateway box will prevent the gateway from being supplied to clients.

          Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

          Need help fast? Netgate Global Support!

          Do not Chat/PM for help!

          1 Reply Last reply Reply Quote 0
          • G
            gdo35
            last edited by

            Hello,

            Old topic bu if it can help :
            I manage to disable the default gateway assignment by DHCP server by setting the network address as default gateway.
            For example I have a network 192.168.1.0/24, I set 192.168.1.0 as the default gateway.

            pfsense accepts it but as the route is invalid it will not be used by the client.

            It is a bite dirty but I hope it helps. ;)

            gdo35

            Geonobot Robotic blog
            Geonobot Robotic wiki

            1 Reply Last reply Reply Quote 0
            • S
              SixFive7
              last edited by

              I know it's 8 years later. However as I'm running into this issue still I've created a ticket: https://redmine.pfsense.org/issues/11927
              Should be an easy and quick fix.

              johnpozJ 1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator @SixFive7
                last edited by

                Already fixed... Says so right in the box where you set a gateway.

                "Type "none" for no gateway assignment."

                gateway.png

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • S
                  SixFive7
                  last edited by

                  This post is deleted!
                  1 Reply Last reply Reply Quote 0
                  • S
                    SixFive7
                    last edited by

                    Ah I figured out the confusion. There is indeed the option for "none" on the main config. It's not available however on the static mappings (although the interface is otherwise the same) where I need it.

                    johnpozJ 1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator @SixFive7
                      last edited by

                      I would have to test it - but bet dollar to donuts none works there too, and just the text not updated there..

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      1 Reply Last reply Reply Quote 0
                      • S
                        SixFive7
                        last edited by

                        I'm afraid a virtual donut just got a bite ;-)

                        This is the validation error:
                        8cc2f613-eabd-4cad-b158-144898a8e22a-image.png

                        Thanks for taking the time to look at this!

                        johnpozJ E 2 Replies Last reply Reply Quote 0
                        • johnpozJ
                          johnpoz LAYER 8 Global Moderator @SixFive7
                          last edited by johnpoz

                          I would alter the redmine you put in to a feature request for the none that works on normal pool, to work on reservations then.

                          Other option, set non on the pool - and set the ones you want for reservations to whatever it is you want bit it pfsense IP or something else.

                          Personally if your not going to set a gateway, prob just easier to set the IP and maybe dns static on the device itself other than setting a reservation for it.

                          Other solution if you don't want something with a reservation going anywhere, just set the gateway to 127.0.0.1 ;) It take that - and that client isn't going anywhere with that set.

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                          1 Reply Last reply Reply Quote 0
                          • E
                            elgranjeff @SixFive7
                            last edited by

                            @sixfive7 - Yes this is an old thread, but I want to share what I just configured because it worked for me in 2.5.2-RELEASE.

                            As commented by Marcos Mendoza on your readmine ticket:

                            https://www.iana.org/assignments/bootp-dhcp-parameters/bootp-dhcp-parameters.xhtml
                            
                            Router aka Gateway is DHCP option 3. You can override what's sent under Additional BOOTP/DHCP Options by specifying an empty string for option 3.
                            
                            I don't see this as necessitating a specific GUI option given that there may be edge cases for many more DHCP options that get sent by default.
                            

                            I can confirm that adding DHCP Option with the following config worked as intended:
                            Number: 3
                            Type: IP address or host
                            Value: none

                            On my windows server host, this network interface was assigned an IPv4 Address, IPv4 Subnet Mask, IPv4 DHCP Server, IPv4 DNS Server, and IPv4 Default Gateway is blank.

                            H 1 Reply Last reply Reply Quote 1
                            • H
                              highc @elgranjeff
                              last edited by

                              @elgranjeff - Thank you for this. It's been quite some time since your post, but this just helped me to solve a similar issue here.

                              For anyone else reading this: You have to type "none" (i.e., the word, without quotes) into the value field. If you enter no value, pfSense will not throw an immediate error on the GUI, but the dhcp server will not start again, as can be seen from the dhcp log.

                              pfSense+ 24.03 on Netgate SG-2100 (replaced SG-2440)
                              pfSense 2.6 on Super Micro 5018D-FN4T (retired)

                              E 1 Reply Last reply Reply Quote 2
                              • E
                                elgranjeff @highc
                                last edited by

                                @highc I'm glad to hear it helped you! Also, thanks for clarifying that a person needs to type the word "none" without quotes—good catch!

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.