DHCP server
Each static IP-configured network interface can have a DHCP server configuration on OPNsense. To start configuring, go to Services | DHCPv4 | [Network interface name]; for our example, I will assume a previously configured interface local area network (LAN).
The following options will be shown on the DHCP server configuration page:
- Enable | Enable DHCP server on the LAN interface: Checking this option will enable the DHCP service on this interface (LAN in our example).
- Deny unknown clients: This option, when checked, will restrict DHCP leases to hosts added to the DHCP Static Mappings for this interface section. Using this option is a good way of preventing unknown hosts from getting a network address and talking with OPNsense, but it will not guarantee that if someone tries to set up a static IP address instead of using DHCP on a host, they won't start accessing other hosts on the network.
Important Note
Using a sniffer tool (such as
tcpdump
or Wireshark...