LAN, DHCP and DNS
Set up the LAN-side interfaces, IPv6 for the LAN, the DHCP server, DNS and static routes.
Interfaces
NETWORK › Interfaces lists Interfaces in use and Unused NICs.
Assign a NIC
- Under Unused NICs, click Assign next to the NIC.
- Enter a Name, e.g. lan2 or guest.
- Set the NIC name (default: the name followed by 0), the Zone and IPv4.
- Click Save.
Saved changes become pending changes. Click Review changes at the top of the screen, apply them, and click Confirm within 5 minutes (see Applying changes).
The NIC name is bound to the MAC address, so it does not change after a reboot.
Add a VLAN
- Click + Add VLAN.
- Enter a Name, the Parent NIC (the physical port that carries the tagged traffic) and the VLAN ID (1–4094).
- Choose the Zone and IPv4, then click Save.
Match the VLAN ID to the switch configuration. A VLAN cannot be created on top of another VLAN.
Interface fields
| Field | Description |
|---|---|
| Name | Starts with a lowercase letter, up to 15 characters |
| Zone | The firewall group that decides how traffic is handled (see Firewall and port forwarding) |
| IPv4 | Static, DHCP or None |
| Address | Address with prefix length for Static, e.g. 192.168.2.1/24. Subnets must not overlap with other interfaces |
| Gateway (optional) | Only when connecting to an upstream router |
| DNS servers (optional) | Only when connecting to an upstream router |
| MTU | Usually empty (default). 576–9216 |
The WAN connection type is set on NETWORK › WAN (see WAN (Internet connection)).
An interface still used by DHCP or the firewall can be deleted, but the change cannot be applied. Remove it from those settings first.
When you change the LAN address, the web UI is no longer reachable at the old address once the change is applied. Renew your device's address, open the web UI at the new address and click Confirm within 5 minutes. Otherwise the router goes back to the old address. Also change the DHCP Address range to match the new subnet.
On the router's console, request lan-address changes the LAN address and the DHCP range together (see First setup).
IPv6 on the LAN
When the WAN's IPv6 is IPoE, a /64 can be taken from the delegated prefix and handed out on each LAN.
- Open NETWORK › LAN / IPv6. There is a box for each interface outside the wan zone.
- Under IPv6, choose Use delegated prefix (DHCPv6-PD).
- Enter the Subnet ID and click Save.
| Field | Description |
|---|---|
| IPv6 | Not used, Use delegated prefix (DHCPv6-PD) or Static |
| Upstream WAN | Shown only when two or more WANs use IPoE. Default Auto |
| Subnet ID | Which /64 of the delegated prefix this LAN uses. Use a different value for each LAN. 0–255 for a /56 |
| Address | The address for Static, e.g. 2001:db8:1::1/64 |
| Router advertisement (RA) | When enabled, advertises the prefix and the DNS server (this router) so devices configure addresses automatically (SLAAC). Enabled by default |
Current IPv6 addresses on the right shows the addresses actually in use. Use delegated prefix cannot be chosen unless a WAN's IPv6 is IPoE.
DHCP
NETWORK › DHCP hands out addresses to LAN devices. It is available only on LAN-side interfaces with a static IP address.
Enable the DHCP server
- Click + Enable DHCP server on
. The address range is created as .100–.199 of the subnet with a 12h lease time. - Change the Address range and Lease time if needed, then click Save.
To stop it, click Disable DHCP server. It keeps running until you apply the change.
| Field | Description |
|---|---|
| Address range | Addresses handed out automatically (start – end). Must be inside the subnet and must not include the router's own address |
| Lease time | How long an assigned address is valid, e.g. 12h, 30m or infinite |
Devices receive this router as their gateway and DNS server, plus the local domain.
Static leases
A static lease always gives the same address to a device.
- Click + Add under Static leases. A free address is suggested.
- Enter the Name, MAC address (e.g. aa:bb:cc:dd:ee:ff) and IP address, then click Save.
The IP address must be outside the address range. Names, MAC addresses and IP addresses must be unique.
Leases
Leases lists the devices that currently hold an address: name, IP address, MAC address and the time left. Click Make static to create a static lease for that device.
DNS
The router is the DNS server for LAN devices. It forwards queries to upstream servers and caches the answers. Configure it on NETWORK › DNS.
Upstream DNS servers and cache
| Field | Description |
|---|---|
| Upstream DNS servers | Obtain from WAN (default) or Specify manually |
| Servers | DNS servers for Specify manually, separated by commas, e.g. 192.0.2.53, 198.51.100.53 |
| Cache size | Number of answers kept. Default 10000. 0 disables caching |
| DNSSEC | When Validate is on, response signatures are checked and tampered answers are discarded |
| Local domain | Domain appended to LAN device names. Default home.arpa |
Devices that got an address by DHCP and devices with a static lease resolve as name.local-domain, e.g. nas.home.arpa. The router itself resolves as hostname.local-domain.
Conditional forwarding
Sends queries for a given domain to a different DNS server, for example an internal domain served by an internal DNS server.
- Enter the Domain (e.g. corp.example) and the DNS server (e.g. 192.168.1.53).
- Click + Add.
Static DNS records
Registers name-to-address pairs. Enter a Hostname (e.g. printer) and an IP address (e.g. 192.168.1.20) and click + Add. The name also resolves with the local domain, such as printer.home.arpa.
Routing (static routes)
Use static routes to reach other networks behind a router on your LAN. Configure them on NETWORK › Routing.
- Under Static routes, enter the Destination (e.g. 10.0.0.0/8) and the Gateway (e.g. 192.168.1.254).
- Click + Add.
| Field | Description |
|---|---|
| Destination | An IPv4 network |
| Gateway | The next router. Must be inside the subnet of an interface with a static address |
Routing table below shows the routes currently in use. In Protocol, kernel is a connected network, static is a configured route, and dhcp/ra are routes received from the provider.
Using the CLI
The same settings can be changed in the CLI (see Using the CLI).
admin@felixxrt> configure
admin@felixxrt# set dhcp lan lease 24h
admin@felixxrt# commit
admin@felixxrt# confirm