Page 1 of 1
How do I make the DHCP setting for 1000 users .
Posted: Mon Jul 13, 2015 12:28 am
by srknyxl
Hello,
How do I make the DHCP setting for 1000 users. Up to 254 people can connect now.
I am using LocalBridge, SecureNAT is disable. I made these settings for DHCP:
http://blog.lincoln.hk/blog/2013/05/17/ ... al-bridge/
Sorry my bad english :) Thank you for answers.
Re: How do I make the DHCP setting for 1000 users .
Posted: Mon Jul 13, 2015 2:41 am
by kh_tsang
Use a /22(255.255.252.0) or a shorter prefix instead of a /24(255.255.255.0) and change the DHCP IP ranges.
Re: How do I make the DHCP setting for 1000 users .
Posted: Sun Jul 19, 2015 9:59 pm
by srknyxl
Thanks for the reply. Does 255.255.252.0 mask have any side effects? I mean why wouldn't larger IP pool come as default if it is flawless.
Re: How do I make the DHCP setting for 1000 users .
Posted: Mon Jul 20, 2015 4:07 am
by kh_tsang
I think it does not have any side effects as long as the number of sessions is low and you have enabled the security policies equivalent to DHCP snooping. However, the clients may receive a lot of broadcasts which is useless to their access to the internet or other services outside the VPN Server. You may want to enable privacy filter mode.
If you want clients to be able to access each other, you may want to use a virtual layer 3 switch instead, but it can also be done using VLAN and the routing feature of your own OS.
Re: How do I make the DHCP setting for 1000 users .
Posted: Mon Jul 20, 2015 4:23 am
by kh_tsang
Actually, I do not use dnsmasq. I am using the built-in Virtual DHCP fearure instead.
[attachment=1]58.png[/attachment]
[attachment=0]59.png[/attachment]
Re: How do I make the DHCP setting for 1000 users .
Posted: Sat Sep 22, 2018 5:22 pm
by donaldii
Hi guys,
I am very new to DCHP and NAT stuff so please forgive me for my ignorance.
I am facing the same problem with supporting larger user groups on one server.
I think I am running out of ips for my users. However, I don't know how to configure the DHCP or NAT correcctly to provide them more ips.
Attached is my current config but it seems only a small portion (about 63) of the IPs can be used.
Any input will be much appreciated.
Don
P.S. Some thread says Virtual NAT and local bridge doesn't work together, so I have deleted local bridge.
DHCP.PNG
ip tables.PNG