1
17.7 Legacy Series / OPNSense as a DHCP Relay Target?
« on: January 28, 2018, 06:41:43 pm »
Greetings!
I'm currently investigating a move to OPNsense from pfSense (like many others after the Reddit kerfuffle the other day). So far, so good, and it's probable that I'll switch. However, I have a question about DHCP service: Can I use OPNsense to make DHCP assignments to unattached networks that have been relayed to it?
My current setup is a layer 3 switch handling Inter-VLAN routing, with 11 VLANs. I know pfSense will not accept DHCP Relay requests; does OPNSense also refuse them? I'm currently using a Raspberry Pi 2 with dnsmasq to provide DHCP (and DNS) services to all of the VLANs, so I know it's technically possible to do.
A related question I guess would be, does the Advanced Options under dnsmasq DNS function effectively like entries in the config files? Because I could just use that for the relay targets, assuming that you haven't set dnsmasq to ignore unknown subnets.
Thanks for any assistance you can give me; it's not a showstopper if it's not possible, but I'd like to get my services all on the one box if possible.
I'm currently investigating a move to OPNsense from pfSense (like many others after the Reddit kerfuffle the other day). So far, so good, and it's probable that I'll switch. However, I have a question about DHCP service: Can I use OPNsense to make DHCP assignments to unattached networks that have been relayed to it?
My current setup is a layer 3 switch handling Inter-VLAN routing, with 11 VLANs. I know pfSense will not accept DHCP Relay requests; does OPNSense also refuse them? I'm currently using a Raspberry Pi 2 with dnsmasq to provide DHCP (and DNS) services to all of the VLANs, so I know it's technically possible to do.
A related question I guess would be, does the Advanced Options under dnsmasq DNS function effectively like entries in the config files? Because I could just use that for the relay targets, assuming that you haven't set dnsmasq to ignore unknown subnets.
Thanks for any assistance you can give me; it's not a showstopper if it's not possible, but I'd like to get my services all on the one box if possible.