Help with extending DCHP range in pfsense 2.0.1



  • Can anyone help me how to set up my pfsense' DCHP so that it can give out 1000+ IP's

    Here's my current set up:

    3 ISP's on load balancing. WAN IP's from each are dynamic.

    Pfsense LAN IP 192.168.1.1
    Subnet Mask 255.255.255.0
    DCHP range 192.168.1.100 - 192.168.1.254

    I have 16 Wireless access point IP Ranges from 192.168.1.11 - 192.168.1.81 All of them subnet mask 255.255.255.0

    Question is. What do I to change or configure from this current set up so that pfsense will be able to give out 1000+ IP's??

    Any help or suggestion will be greatly appreciated.  :)


  • Rebel Alliance



  • your subnet mask need to be at least 255.255.252.0 /22

    But if you need all 1022 ip's to hosts, then you'll either have to move dhcp to another range and wlan-ap's to another range or use 255.255.248.0 /21 mask what will give 2046 host ip's.

    Before making any changes, you should consider the amount of broadcast traffic what that large subnet can produce.

    As a hint also, ap's don't have to be on same network as clients.



  • Sorry for being a noob.. But can anyone give a sample configuration on how I can accomplish this???



  • @AYSMAN:

    Sorry for being a noob.. But can anyone give a sample configuration on how I can accomplish this???

    You need 1000 IP addresses for DHCP. You need 10 bits to hold 1000 addresses. Therefore out of the 32 bit IP address your network mask can be at most 32-10 = 22 bits.

    Your current LAN IP network is 192.168.1.0/24.  You can't just change that 192.168.1.0/22 because the right-most 10 bits will be non-zero meaning 192.168.1.0/22 is a host address. However, if you change the pfSense LAN IP network to 192.168.4.0/22 the rightmost 10 bits are zero. Then you should be able to configure DHCP range on LAN of (say) 192.168.4.10 to 192.168.7.249.

    If you haven't already read the linked references you should do so.

    The should be fairly "obvious" extensions to 2000 addresses, 4000 addresses, 8000 addresses etc, though as previously pointed out, there can be good practical reasons for not going too high.


Locked