Products Firewalla Gold SE Firewalla Gold Pro Firewalla Gold Plus Firewalla Purple Firewalla Purple SE Firewalla Wi-Fi SD Product Comparison Product Reviews

Multiple IP Reservations

Follow
Avatar
Richard Riffel

Is it possible that DHCP reservations can be made based on Mac addresses, on a per-vlan basis?   I have a raspberry pi that will have a primary and VLAN connection, and I would like to assign IP addresses for each one, on the Gold.

I can set static IP addresses in the RPi, but I would prefer to centrally manage the IP allocation and not on each device.

0

Comments

10 comments

Sort by Date Votes
  • Avatar
    Firewalla

    You can do this today.  See https://help.firewalla.com/hc/en-us/articles/115004304054-Device-View

    under IP reservation.

    0
    Comment actions Permalink
  • Avatar
    Richard Riffel

    yes, but it looks like you can only do it once based on a single mac address.  is it possible to somehow segment the DHCP requests based on which port it comes in on and allocate a different address, for example:

    device on port 1 at mac address: 00:1B:44:11:3A:B7-> 192.168.64.5

    device on port 2 at mac address 00:1B:44:11:3A:B7-> 192.168.45.56

    It looks now like it's one IP reservation per Mac address.      I'm thinking depending which switch port the device is attached to i can route it to different Gold ports at level 3 on the switch.

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    It is possible to do this.  But, for simplicity's sake, unless there is a huge demand for this, we will unlikely to build it.  It just makes things complex. 

    Let's see if there are others who want the same.   they can comment on this thread. 

    0
    Comment actions Permalink
  • Avatar
    Richard Riffel

    Thanks, understand this is a very unique request and probably not worth the programming and subsequent SVT.  Just wondered if it was already done.   Thanks for responding!

     

    0
    Comment actions Permalink
  • Avatar
    James Willhoite

    I would rather assign it myself. I always leave about 10-25 open up addresses outside the DHCP for this purpose. That way I have some to use if I need to have a static pool. (Start the dhcp pool at like 25 or 50. That way I have numbers 2-24 to assign)

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    @James, agree with your idea.  We do this to our network ourselves.   Leaving a section for static IP's reserved for special devices. 

    0
    Comment actions Permalink
  • Avatar
    jeff.stahl

    I know this is an old thread, but I ran into it myself while looking for a solution to my problem.  I also have multiple VLAN interfaces on a single host, but it seems like Firewalla arbitrarily picks one of the IPs on one of the interfaces for "THE" IP of the host.  Example:  I have 192.168.10.18, 192.168.20.18, 192.168.40.18 and 192.168.60.18 on my host.  One day, Firewalla may show the IP on the host as the 192.168.10.18 IP.  Then the next time I look at it, it may have the 192.168.60.18.  

    Is there any way to incorporate multiple IPs associated with a host in Firewalla?  I know this may be a limited use case, but it's something that's definitely causing me issues and limiting my usage of the product.  Thanks!

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    @jeff.stahl, in your case, does your host (with the VLAN configured) have the same MAC address for all the VLAN segments?

    0
    Comment actions Permalink
  • Avatar
    jeff.stahl

    @Firewalla - Yes, it sure does.  I'm just creating sub interfaces (vlan.10, vlan.20, etc) all bound to the parent (ens01).  This seems to cause Firewalla to change the displayed IP every time I look at the device.

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    Firewalla is not aware the same device is on different networks, so it just cycles through the IP addresses as they are all local. Will let the developers know about this

    0
    Comment actions Permalink

Please sign in to leave a comment.

Didn't find what you were looking for?

New post