dhcp exclusions

Follow

Brian

• May 01, 2025 19:04

is there no way to do dhcp exclusions in firewalla?

we are migrating some firewalls over that are using them and I am not seeing that feature anywhere in the ui or docs for firewalla

surely the dhcpd has the ability, can this be something edited via ssh?

on a side note: I am not seeing a dhcp relay option either

are these features (dhcp pool exclusions and dhcp relay) available outside the ui and/or are they planned?

0

• 

  Firewalla

  • May 01, 2025 19:29

  By DHCP exclusions, do you mean a specific range? This can be done just defining the DHCP start and end range right? it is supported today

  If you mean, reserve DHCP addresses, it is also there. (under devices, find your device, tap on IP)

  DHCP relay is something not used often, do you mean to relay to a Windos box?

  0

  Comment actions Permalink
• 

  Doyle Jack

  • June 04, 2025 16:49

  He might mean excluding some addresses within the range.

  For example, let's say my DHCP scope is: 192.168.1.10 - 192.168.1.200, I might want to define a small range (e.g., 192.168.1.50 - 192.168.1.59) as excluded from the range, disallowing DHCP to assign those addresses.

  0

  Comment actions Permalink
• 

  Firewalla

  • June 04, 2025 20:35

  why can't you just define your DHCP as 192.168.1.60 - 192.168.1.254, it is far easier

  0

  Comment actions Permalink
• 

  Brian

  • June 04, 2025 20:54

  apologies, I had replied to this but it didn't show, my page may have been cached and I wasn't logged in or something

  at any rate, what I meant was excluding a certain range of IPs from being handed out

  this is not some out of the ordinary request, some dhcp servers refer to it as exclusions

  so for example, if the pool was x.x.x.10-x.x.x.200 and you didn't want it to assign x.x.x.101-110, you would create an exclusion

  some servers do not refer to it as exclusions though, they just allow you to define multiple pools (i.e. on a mikrotik)

  this is something you can do in ISC DHCPD as well, isn't that what you guys use?

  0

  Comment actions Permalink
• 

  Brian

  • June 04, 2025 21:05

  to the other question

  DHCP relay is actually very useful and used quite a bit (even in products like ubnt), it doesn't have anything to do with windows though (I am assuming windos was a typo, if not, I am not sure about "Windos")

  Basically, it allows you to run a single DHCP server on a particular subnet. The firewall/gateway device can relay any DHCP requests from different subnets/vlans to that server.

  We work on a lot of networks that have that sort of setup because they aren't running DHCP on their firewall.

  In this particular case, we were able to move dhcp to the firewalla but the feature would be appreciated for larger networks.

  Thanks for the replies to the original post!

  0

  Comment actions Permalink

Please sign in to leave a comment.