My range used to be 10.1.1.0/24 misc devices such as router management was 1-10 servers were 10-20 workstations where 20-100 and rest was DHCP.
I also had a double nat, which was silly, so got rid of that. There was a separate IP range between the firewall and the router. Got rid of the router and have everything going straight to the firewall which has now been setup for DHCP and obviously also does NAT. Also got snort to work, there was some rules it did not like and I just had never got around to troubleshooting.
I also changed to 10.1.0.0/16 range, because I can. :awe: 10.1.1 is servers 10.1.2 is workstations, and so on. Basically a full 255 IPs per "purpose". WAAAY overkill, but why not eh. Eventually when I get a managed switch I will probably break those down into /24 vlans but for now it's just all part of a /16.
Changed a lot of device IPs, updated forward and reverse DNS records, and everything is working flawlessly. Only a few hours of work. Time to go watch a movie or something now.
/blog.
So what did everyone else do on this long weekend Sunday?
I also had a double nat, which was silly, so got rid of that. There was a separate IP range between the firewall and the router. Got rid of the router and have everything going straight to the firewall which has now been setup for DHCP and obviously also does NAT. Also got snort to work, there was some rules it did not like and I just had never got around to troubleshooting.
I also changed to 10.1.0.0/16 range, because I can. :awe: 10.1.1 is servers 10.1.2 is workstations, and so on. Basically a full 255 IPs per "purpose". WAAAY overkill, but why not eh. Eventually when I get a managed switch I will probably break those down into /24 vlans but for now it's just all part of a /16.
Changed a lot of device IPs, updated forward and reverse DNS records, and everything is working flawlessly. Only a few hours of work. Time to go watch a movie or something now.
/blog.
So what did everyone else do on this long weekend Sunday?