• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Multiple LAN IP range

Scheduled Pinned Locked Moved Firewalling
3 Posts 3 Posters 571 Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • R
    ravegen
    last edited by Jul 1, 2018, 6:57 AM

    I have not done this BUT Just thinking the possibility.

    What if, I have my LAN interface ip range set to 10.0.0.1/24
    Then, I also have alias group1 with ip range set to 10.0.2/24
    Then, I also have alias group2 with ip range set to 10.0.4/24
    Then, I also have alias group4 with ip range set to 10.0.6/24
    Then, I also have alias group5 with ip range set to 10.0.8/24
    Then, I also have alias group6 with ip range set to 10.0.10/24
    All IP range are allow to have internet access on LAN firewall rules.

    I set group of computers to have ip range of LAN and group1 to group5.
    So it is expected that only ip range 10.0.0.1/24 will be the DHCP ip range.

    1. So my thought is, is LAN and all the GROUP alias will have internet connection ?
    2. Since LAN and Group aliases are on different IP range, even if they are on same LAN interface, can I make of LAN firewall rules to permit traffic between those groups ?
    S 1 Reply Last reply Jul 2, 2018, 12:05 AM Reply Quote 0
    • H
      heper
      last edited by Jul 1, 2018, 9:42 AM

      i dont understand what you are wanting todo.....
      but whatever it is, its wrong, it wont work, its borked®

      a) don't use multiple ranges on the same interface (you can use vlans)
      b) subnetting doesn't work like you think it does (http://study-ccna.com/subnetting-explained/)

      1 Reply Last reply Reply Quote 0
      • S
        SammyWoo @ravegen
        last edited by SammyWoo Jul 2, 2018, 12:06 AM Jul 2, 2018, 12:05 AM

        @ravegen What you are doing maybe called SEGMENTING, or running multiple LAN subnets, and any time you hear that, it may become a Pandora box. I mean you may have a valid reason to do so, but just be aware, u maybe chewing more than u can handle.

        Yes, multiple segments can be created via a firewall box with multiple LAN NICs, or in your case using a VLAN capable switch most likely.

        Yes DHCP will handles all those segments just fine.

        How many clients aprox are we talking about that you contemplating doing this?

        1 Reply Last reply Reply Quote 0
        1 out of 3
        • First post
          1/3
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
          This community forum collects and processes your personal information.
          consent.not_received