DHCP services

[Atkins, Dwane P]

Recently, I added some IPs to our pfSense device. I made the change
10.10.202.0/23 and made it 10.10.202.0/22. BUT---when I went to change
my DHCP service from 10.10.202.10 - 10.10.203.250 to 10.10.202.10 -
10.10.205.250, it said I was out of range and would that the available
subnets were 10.10.200.0 - 10.10.203.0.



How do I get it to dole out the DHCP address I want to dole out instead
of the ones that were chosen for me?


Thanks


Dwane



Dwane Atkins

Senior Network Analyst

IMS-System & Network Operations

University of Texas Health Science Center at San Antonio

Tel: [phone]

http://ims.uthscsa.edu <http://ims.uthscsa.edu/>

[Arne de Bree]

10.10.202/22 has a subnet host address range from 10.10.200.1 -
10.10.203.254. The upper half of your DHCP range falls outside the subnet
and is therefore not allowed. Increase the subnet to a /21, which will
result in 10.10.207.254 as the upper host address limit, if you need that
upper half of the range.



Gr, Arne



_____

From: Atkins, Dwane P [mailto:ATKINSD-***@public.gmane.org]
Sent: dinsdag 26 augustus 2008 19:49
To: support-***@public.gmane.org
Subject: [pfSense Support] DHCP services



Recently, I added some IPs to our pfSense device. I made the change
10.10.202.0/23 and made it 10.10.202.0/22. BUT---when I went to change my
DHCP service from 10.10.202.10 - 10.10.203.250 to 10.10.202.10 -
10.10.205.250, it said I was out of range and would that the available
subnets were 10.10.200.0 - 10.10.203.0.



How do I get it to dole out the DHCP address I want to dole out instead of
the ones that were chosen for me?


Thanks


Dwane



Dwane Atkins

Senior Network Analyst

IMS-System & Network Operations

University of Texas Health Science Center at San Antonio

Tel: [phone]

http://ims.uthscsa.edu <http://ims.uthscsa.edu/>

[Atkins, Dwane P]

Arne,



Will I have to change all my routing to make these changes? I want to
do 202.0 - 205.250.



I do not want to make anymore changes than what is needed.



Thanks


Dwane



________________________________

From: Arne de Bree [mailto:arne-dHp1lVEY5iNmR6Xm/***@public.gmane.org]
Sent: Tuesday, August 26, 2008 1:03 PM
To: support-***@public.gmane.org
Subject: RE: [pfSense Support] DHCP services



10.10.202/22 has a subnet host address range from 10.10.200.1 -
10.10.203.254. The upper half of your DHCP range falls outside the
subnet and is therefore not allowed. Increase the subnet to a /21, which
will result in 10.10.207.254 as the upper host address limit, if you
need that upper half of the range.



Gr, Arne



________________________________

From: Atkins, Dwane P [mailto:ATKINSD-***@public.gmane.org]
Sent: dinsdag 26 augustus 2008 19:49
To: support-***@public.gmane.org
Subject: [pfSense Support] DHCP services



Recently, I added some IPs to our pfSense device. I made the change
10.10.202.0/23 and made it 10.10.202.0/22. BUT---when I went to change
my DHCP service from 10.10.202.10 - 10.10.203.250 to 10.10.202.10 -
10.10.205.250, it said I was out of range and would that the available
subnets were 10.10.200.0 - 10.10.203.0.



How do I get it to dole out the DHCP address I want to dole out instead
of the ones that were chosen for me?


Thanks


Dwane



Dwane Atkins

Senior Network Analyst

IMS-System & Network Operations

University of Texas Health Science Center at San Antonio

Tel: [phone]

http://ims.uthscsa.edu <http://ims.uthscsa.edu/>

[Atkins, Dwane P]

Arne,



The problem is that t he lower half is already being used.



Does anyone have anyway of correcting this issue? And how will it
affect our pfSense device right now?



Thank you,


Dwane



________________________________

From: Atkins, Dwane P [mailto:ATKINSD-***@public.gmane.org]
Sent: Tuesday, August 26, 2008 1:09 PM
To: support-***@public.gmane.org
Subject: RE: [pfSense Support] DHCP services



Arne,



Will I have to change all my routing to make these changes? I want to
do 202.0 - 205.250.



I do not want to make anymore changes than what is needed.



Thanks


Dwane



________________________________

From: Arne de Bree [mailto:arne-dHp1lVEY5iNmR6Xm/***@public.gmane.org]
Sent: Tuesday, August 26, 2008 1:03 PM
To: support-***@public.gmane.org
Subject: RE: [pfSense Support] DHCP services



10.10.202/22 has a subnet host address range from 10.10.200.1 -
10.10.203.254. The upper half of your DHCP range falls outside the
subnet and is therefore not allowed. Increase the subnet to a /21, which
will result in 10.10.207.254 as the upper host address limit, if you
need that upper half of the range.



Gr, Arne



________________________________

From: Atkins, Dwane P [mailto:ATKINSD-***@public.gmane.org]
Sent: dinsdag 26 augustus 2008 19:49
To: support-***@public.gmane.org
Subject: [pfSense Support] DHCP services



Recently, I added some IPs to our pfSense device. I made the change
10.10.202.0/23 and made it 10.10.202.0/22. BUT---when I went to change
my DHCP service from 10.10.202.10 - 10.10.203.250 to 10.10.202.10 -
10.10.205.250, it said I was out of range and would that the available
subnets were 10.10.200.0 - 10.10.203.0.



How do I get it to dole out the DHCP address I want to dole out instead
of the ones that were chosen for me?


Thanks


Dwane



Dwane Atkins

Senior Network Analyst

IMS-System & Network Operations

University of Texas Health Science Center at San Antonio

Tel: [phone]

http://ims.uthscsa.edu <http://ims.uthscsa.edu/>

[Chris Buechler]

Will I have to change all my routing to make these changes? I want to do
202.0 – 205.250.

Hard to say, depends on how this is configured in other parts of your
network. If you expect to use a /21, your interface has to be a part
of that /21 network. You can't assign IPs that are out of the local
subnet, which is what you were trying to do. If your entire internal
network is private and everything outside that network is public you
won't need to do anything but change your internal interface's subnet.
If you have private IP space routed to you from other parts of your
campus network and do not use NAT, you'll need to make sure the
routing is configured appropriately on the WAN side network.

[Atkins, Dwane P]

We want to release all offline addresses in the DHCP Leases. Can we
manually release these?


-----Original Message-----
From: Chris Buechler [mailto:cbuechler-***@public.gmane.org]
Sent: Tuesday, August 26, 2008 4:09 PM
To: support-***@public.gmane.org
Subject: Re: [pfSense Support] DHCP services

Will I have to change all my routing to make these changes? I want to do
202.0 - 205.250.

Hard to say, depends on how this is configured in other parts of your
network. If you expect to use a /21, your interface has to be a part
of that /21 network. You can't assign IPs that are out of the local
subnet, which is what you were trying to do. If your entire internal
network is private and everything outside that network is public you
won't need to do anything but change your internal interface's subnet.
If you have private IP space routed to you from other parts of your
campus network and do not use NAT, you'll need to make sure the
routing is configured appropriately on the WAN side network.

---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscribe-***@public.gmane.org
For additional commands, e-mail: support-help-***@public.gmane.org

[Atkins, Dwane P]

Is there a way to force release of a DHCP address? Or is there a way to
stop the iPhone, iPods and Blackberry's from automatically requesting a
DHCP address?

Thank you

-----Original Message-----
From: Chris Buechler [mailto:cbuechler-***@public.gmane.org]
Sent: Tuesday, August 26, 2008 4:09 PM
To: support-***@public.gmane.org
Subject: Re: [pfSense Support] DHCP services

Will I have to change all my routing to make these changes? I want to do
202.0 - 205.250.

Hard to say, depends on how this is configured in other parts of your
network. If you expect to use a /21, your interface has to be a part
of that /21 network. You can't assign IPs that are out of the local
subnet, which is what you were trying to do. If your entire internal
network is private and everything outside that network is public you
won't need to do anything but change your internal interface's subnet.
If you have private IP space routed to you from other parts of your
campus network and do not use NAT, you'll need to make sure the
routing is configured appropriately on the WAN side network.

---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscribe-***@public.gmane.org
For additional commands, e-mail: support-help-***@public.gmane.org

[Atkins, Dwane P]

Does anyone have a recommendation for the DHCP default lease time? We
have a Captive Portal Idle Timeout of 30 minutes and a Hard timeout of
720 minutes. Our DHCP lease is 43300 seconds or a little more than 12
hours.

We do want our students to log in a bunch of times, but we do not want
them to keep an IP address for hours after they stop using it.

We have been told to change make the default lease time more than our
captive portal session. What would happen if we change the default
lease time on the DHCP server to 7200 second and left the rest? How
would this affect the users?

Thanks

Dwane

-----Original Message-----
From: Chris Buechler [mailto:cbuechler-***@public.gmane.org]
Sent: Tuesday, August 26, 2008 4:09 PM
To: support-***@public.gmane.org
Subject: Re: [pfSense Support] DHCP services

Will I have to change all my routing to make these changes? I want to do
202.0 - 205.250.

Hard to say, depends on how this is configured in other parts of your
network. If you expect to use a /21, your interface has to be a part
of that /21 network. You can't assign IPs that are out of the local
subnet, which is what you were trying to do. If your entire internal
network is private and everything outside that network is public you
won't need to do anything but change your internal interface's subnet.
If you have private IP space routed to you from other parts of your
campus network and do not use NAT, you'll need to make sure the
routing is configured appropriately on the WAN side network.

---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscribe-***@public.gmane.org
For additional commands, e-mail: support-help-***@public.gmane.org

[Atkins, Dwane P]

Is there a way that once a person has logged out of the Captive Portal,
it will release the DHCP address?

Thanks

-----Original Message-----
From: Atkins, Dwane P [mailto:ATKINSD-***@public.gmane.org]
Sent: Thursday, September 04, 2008 3:05 PM
To: support-***@public.gmane.org
Subject: RE: [pfSense Support] DHCP services

Does anyone have a recommendation for the DHCP default lease time? We
have a Captive Portal Idle Timeout of 30 minutes and a Hard timeout of
720 minutes. Our DHCP lease is 43300 seconds or a little more than 12
hours.

We do want our students to log in a bunch of times, but we do not want
them to keep an IP address for hours after they stop using it.

We have been told to change make the default lease time more than our
captive portal session. What would happen if we change the default
lease time on the DHCP server to 7200 second and left the rest? How
would this affect the users?

Thanks

Dwane

-----Original Message-----
From: Chris Buechler [mailto:cbuechler-***@public.gmane.org]
Sent: Tuesday, August 26, 2008 4:09 PM
To: support-***@public.gmane.org
Subject: Re: [pfSense Support] DHCP services

Will I have to change all my routing to make these changes? I want to do
202.0 - 205.250.

Hard to say, depends on how this is configured in other parts of your
network. If you expect to use a /21, your interface has to be a part
of that /21 network. You can't assign IPs that are out of the local
subnet, which is what you were trying to do. If your entire internal
network is private and everything outside that network is public you
won't need to do anything but change your internal interface's subnet.
If you have private IP space routed to you from other parts of your
campus network and do not use NAT, you'll need to make sure the
routing is configured appropriately on the WAN side network.

---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscribe-***@public.gmane.org
For additional commands, e-mail: support-help-***@public.gmane.org


---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscribe-***@public.gmane.org
For additional commands, e-mail: support-help-***@public.gmane.org

[Chris Buechler]

Post by Atkins, Dwane P
Does anyone have a recommendation for the DHCP default lease time? We
have a Captive Portal Idle Timeout of 30 minutes and a Hard timeout of
720 minutes. Our DHCP lease is 43300 seconds or a little more than 12
hours.
We do want our students to log in a bunch of times, but we do not want
them to keep an IP address for hours after they stop using it.
We have been told to change make the default lease time more than our
captive portal session. What would happen if we change the default
lease time on the DHCP server to 7200 second and left the rest? How
would this affect the users?

Your lease will need to be a little longer than your hard timeout.
Otherwise if the lease expired and someone else were to get it and the
previous user didn't log out, the new user won't have to authenticate
until the hard timeout.

There isn't any way to release a DHCP lease when a user logs out.

[Atkins, Dwane P]

What is the Maximum lease time on the DHCP server? It say that the
lease time is for clients that ask for a specific expiration time.

Should that be set as well?

Thank you

Dwane

-----Original Message-----
From: Chris Buechler [mailto:cbuechler-***@public.gmane.org]
Sent: Thursday, September 04, 2008 8:54 PM
To: support-***@public.gmane.org
Subject: Re: [pfSense Support] DHCP services

Post by Atkins, Dwane P
Does anyone have a recommendation for the DHCP default lease time? We
have a Captive Portal Idle Timeout of 30 minutes and a Hard timeout of
720 minutes. Our DHCP lease is 43300 seconds or a little more than 12
hours.
We do want our students to log in a bunch of times, but we do not want
them to keep an IP address for hours after they stop using it.
We have been told to change make the default lease time more than our
captive portal session. What would happen if we change the default
lease time on the DHCP server to 7200 second and left the rest? How
would this affect the users?

Your lease will need to be a little longer than your hard timeout.
Otherwise if the lease expired and someone else were to get it and the
previous user didn't log out, the new user won't have to authenticate
until the hard timeout.

There isn't any way to release a DHCP lease when a user logs out.

---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscribe-***@public.gmane.org
For additional commands, e-mail: support-help-***@public.gmane.org

[Chris Buechler]

Post by Atkins, Dwane P
What is the Maximum lease time on the DHCP server? It say that the
lease time is for clients that ask for a specific expiration time.
Should that be set as well?

Yeah set that to the same. It likely won't be used.

[Alexandre F Guimaraes]

You have change the Mask Bits, and you have to reconfigure direct net
connecteds, your subnet range address is 10.10.200.1 - 10.10.203.254 /22
(255.255.252.0)

Just modify de range of DHCP service, and the hosts will get new IPs, Mask,
Gw...

Remember, You need to change all hosts that have static ip with new config
to, subnet ips and mask.


Alexandre Guimaraes
LaRCom
Laboratorio de Redes de Comunicacoes
Departamento de Comunicacoes
Faculdade de Engenharia Eletrica e Computacao
Unicamp



-----Mensagem original-----
De: Atkins, Dwane P [mailto:ATKINSD-***@public.gmane.org]
Enviada em: terca-feira, 26 de agosto de 2008 14:49
Para: support-***@public.gmane.org
Assunto: [pfSense Support] DHCP services


Recently, I added some IPs to our pfSense device. I made the change
10.10.202.0/23 and made it 10.10.202.0/22. BUT---when I went to change my
DHCP service from 10.10.202.10 - 10.10.203.250 to 10.10.202.10 -
10.10.205.250, it said I was out of range and would that the available
subnets were 10.10.200.0 - 10.10.203.0.

How do I get it to dole out the DHCP address I want to dole out instead of
the ones that were chosen for me?

Thanks

Dwane

Dwane Atkins
Senior Network Analyst
IMS-System & Network Operations
University of Texas Health Science Center at San Antonio
Tel: [phone]
http://ims.uthscsa.edu