Do you use dhcp reservations?

bmeeks

@AndyRH said in Do you use dhcp reservations?:

@bmeeks No war needed. If I change PiHoles, which has happened, I update DHCP and the changes are propagated. Same thing with NTP.
When I changed physical firewalls, it was great. I just put in the new settings and waited a day then turned off the old one.
Either way is valid.

Agree that either way is valid. It is a lot based on personal preference.

I came from a Fortune 500 network environment where we managed probably 50,000 devices or more (nearly 30,000 of those were employee desktop PCs and laptops). We made extensive use of Windows DHCP dynamic DNS updates to register those employee devices so the internal Help Desk could find them quickly by name instead of having to talk the user through identifying the particular IP address they had at the moment. We named the devices using a variation of the employee's network login ID.

We also used small static IP blocks carved out of the various IP subnets. In those static blocks is where we put things like core switches, network closet switch stacks, and most servers.

bmeeks

@maverickws said in Do you use dhcp reservations?:

@bmeeks said in Do you use dhcp reservations?:

just asking why choose reservation over static when you want a given device to have a given IP

Mind elaborating the difference between "reservation" and "static" in your perspective. afaik there is none.

Reservation is a DHCP construct based off of the client's MAC address. So anytime the hardware changes (new device or replace the network card), the MAC changes and you need to edit the reservation in the DHCP server. With static IP, I simply type in the desired IP address in the client's network setup screen. Both yield the same end result -- a given client gets a particular fixed IP address. What's different is exactly how you get there (at least that's how I define it).

maverickws

@bmeeks I don't think it was ever discussed in this topic "client-side configurations".

Truth be told, there is no reference on the pfSense software to DHCP Reservations (may be wrong but I really don't think there are).
When you go to DHCP Server you have an option to add a static entry. I believe it's a colloquialism where people are using reservation instead of static entry. You can't add "reservations" on pfSense, at least not by that nomenclature.

bmeeks

@maverickws said in Do you use dhcp reservations?:

@bmeeks I don't think it was ever discussed in this topic "client-side configurations".

Truth be told, there is no reference on the pfSense software to DHCP Reservations (may be wrong but I really don't think there are).
When you go to DHCP Server you have an option to add a static entry. I believe it's a colloquialism where people are using reservation instead of static entry.

The wording can be confusing. I like to think of it as a reservation because you are reserving that IP address in the mind of the DHCP server, but only for a client whose MAC address matches the one you enter in the static assignment setup.

The other way, when I say "static", is on the actual client device I configure the network for "static IP" and not DHCP, and I manually type in the address and subnet I want that client to use. I realize that in the world of IoT, there may be devices that can only do DHCP, and if that is the case then you would need to use the DHCP reservation route to have a known, fixed IP address on the device.

So, to clarify, when I say "reservation" I am thinking of an entry in the DHCP server's configuration where I link a particular MAC address with a particular IP address. When I say "static", I am thinking of the situation where the client device is NOT using DHCP and I instead enter the IP information directly into the client manually. Been doing this sort of thing for a little over 40 years, and that's just the way I learned way back when.

mer

Yep. Been using them for a long time on the home network.
Makes it very easy to distingush "normal" devices from guests.
Since pretty much everything defaults to doing DHCP you wind up managing everything from a single place.

maverickws

@bmeeks got it.
I figured it was just some nuance of speech but wanted to clear it out just to make sure. Personally I most times call them "static mappings" or "arp mappings".

Also I believe there is a situation here, if I'm wrong please someone correct me but

pfSense allows a static mapping from many to one. This is, you can have several static entries using different MACs and the same IP address.
Now I am not sure because I hardly ever selected this option, but I figure when you select the option to have that
ARP Table Static Entry maybe then it is a reservation? Again, not sure on this one.
But in the true concept of the term, as it allows several entries for the same IP, it hardly ever is a reservation.
Also, by the way pfSense works, static mappings only exist outside the DHCP dynamic range, so an IP on the range "static" wouldn't go to the dynamic attributions.

Bob.Dig

I use it, even with IPv6.
(One person doesn't like this)

KOM

I don't use reservations at home or at the office. For me the only benefit would be easier renumbering, and that's something I haven't needed to do in the 20+ years I've been at this company. I report directly to the owners and they want to be able to do whatever they want when they want including weekends and evenings when I'm not around. I appreciate the security aspects but the owners don't like security getting in the way of their convenience.

azdeltawye

@johnpoz
Yes, I rely heavily on DHCP reservations for firewall rules and grouping of similar devices..

Does Kea DHCP not allow for static mappings?

azdeltawye

@bmeeks said in Do you use dhcp reservations?:

To me, it is easier in such situations to use a static IP assignment....

Maybe in some cases. However, many dumb IOT devices are 'hardwired' for DHCP.

MoonKnight

@johnpoz

Yes I use lot of DHCP Static Mappings all over my VLAN's :)

johnpoz

@azdeltawye said in Do you use dhcp reservations?:

Does Kea DHCP not allow for static mappings?

It does, but does not register them in unbound for dns as of yet.

ahking19

Yes, for all my home VLANs except the Guest one.

johnpoz

@maverickws said in Do you use dhcp reservations?:

Personally I most times call them "static mappings" or "arp mappings".

Why I called it out and hope make clear what I was talking about.. The static mapping term seems to be newer wording.. Us old farts, at least in my part of the world use reservation - because that is what they are, they are reservation for that mac to get this specific IP.. Kind of like when you make a reservation at a restraunt for table by the window..

But maybe it also just regions of the world use different terms?

That is another thing that is curious ;) maybe I could start another poll - hehehe

static mapping and arp mapping don't make a lot sense to me... Because that is not what it is, its a "reservation" on the dhcp server to give client X ip Y..

And unlike the Seinfeld episode, a dhcp server normally knows how to hold a reservation ;)

Youtube Video

bmeeks

@johnpoz said in Do you use dhcp reservations?:

Us old farts, at least in my part of the world use reservation

Welcome to the official pfSense old farts club . We can be the charter members!

Phizix

@johnpoz
I use them extensively. I also have Aliases for groups of addresses that I put them into, so I can make rules. Example Desktops, Laptops, and a combined alias of Computers (Desktop + Laptops). IOT devices, etc . . . .

I leave DHCP assigned to a certain range for new devices. I periodically (about once per week) look for any leases in that range (and hunt them down and kill them - J/K). If they are a new device that needs to be statically mapped I do so. If it is some temporary device I just make a mental note of it.

Phizix

gauthig

@johnpoz
This is the real problem with migrating to Kea at this time. It is irrespective of using static mappings (or reservations), fully DHCP or a combination of both on each subnet.

A good network should be using SSL on servers/services. An API call or just using a web browser breaks the validation of your cert if you use IP address instead of a FQDN. Modern browsers also are stopping you by forcing an acknowledgement to go to the site if you did not use the correct name in the URL, i.e. IP address.

One way around this is to set up all servers, like NAS, Plex, Home Assistant, Grafana, Influx.... (whatever you have on your local network), with static IP's (or static mappings) and then manually create an entry in unbound. But that extra work, more like BOUND and not unbound.

Let's just keep asking to add the KEA to unbound integration as a priority.
In the meantime, I'll be watching for any isc-dhcp CVE's and determine if I go the manual BOUND route or not.

SteveITS

@johnpoz May be sample bias as most users here are advanced.

@bmeeks Two reasons for us…

Windows 10 1607 feature update IIRC had a high tendency to (apparently) reset/reinstall the network adapter and therefore lose static IP settings. Have also seen this with resetting printers or other hardware.
if you need to change your subnet or especially mask it saves time touching each device to update manually.

johnpoz

@SteveITS said in Do you use dhcp reservations?:

May be sample bias as most users here are advanced.

That was my whole thought/point to be honest, I would think users of pfsense would lean towards being more advanced than your typical home router, what is an IP user ;)

Which is why I would think using reservations would pretty common.. Which so far that is what the poll is showing as well.

NogBadTheBad

I do, most of my devices are dhcp reservations.

After the update I and bet a lot of other people went back to the old dhcp server.