DHCP Server netmask. How to define?

[Nathan.S]

Working with the built-in DHCP server on a PA200. Running PanOS 5.0.4

Eth1/3 has the address of 172.168.1.1/16

I have devices with static IPS in the 172.168.1.0/24 range.

I'd like to have the clients in the 172.168.2.0/24 range so I'll need the netmask to be 255.255.0.0, however, there's no way to set that (that I can see) on the PAN.

Setting the DHCP range to 172.168.2.1-172.168.2.254 results in a netmask of 255.255.255.0 on the client. This breaks all connectivity as the gateway is still 172.168.1.1

I've tried setting the range to 172.168.1.250-172.168.2.254 (forcing the netmask to be different for it to work) and still the client gets a 255.255.255.0 netmask.

I looked at the CLI manual and can't find any useful information there.

Does DCHP only hand out a netmask of 255.255.255.0 no matter what?

[Nathan.S]

Changing the IP structure all around seemed to have resolved it.

Eth1/3 172.22.1.1/22

DHCP: 172.22.1.0/22

Reserved address of 172.22.1.1

Client got 172.22.1.0 with a netmask of 255.255.252.0

It would appear that the DHCP settings were 'stuck' and changing everything around completely fixed it.

[ericgearhart]

Go look at your config audits and compare the versions! I wonder if the way that PA tries to "overlay" diffs was flaking out in this case.

A "full commit" might have fixed it too. Hm.