DHCP server

Each routing domain has its own DHCP server. Open a domain to set it up or change it.

Routing domain	DHCP	Networks	Reservations	Advertises this router	Drift	Instance	Lease table
{{S_LABEL}}	{{S_MODE}}	{{S_NETWORKS}}	{{S_RESERVATIONS}}	{{#S_ADVERTISES}}yes{{/S_ADVERTISES}}{{^S_ADVERTISES}}—{{/S_ADVERTISES}}	{{#S_DRIFT}}drift{{/S_DRIFT}}{{#S_DRIFT_UNKNOWN}}unknown{{/S_DRIFT_UNKNOWN}}{{^S_DRIFT}}{{^S_DRIFT_UNKNOWN}}—{{/S_DRIFT_UNKNOWN}}{{/S_DRIFT}}	{{S_STATE}}	{{#S_HAS_TABLE}}{{S_TABLE}}{{/S_HAS_TABLE}}{{^S_HAS_TABLE}}—{{/S_HAS_TABLE}}	{{#S_KNOWN}}Open{{/S_KNOWN}}{{^S_KNOWN}}domain gone; remove from the console{{/S_KNOWN}}

{{#DHCP_SCOPE_WALKED}}Instance state from the last walk, {{DHCP_SCOPE_WALK_AGE}} s ago.{{/DHCP_SCOPE_WALKED}}{{^DHCP_SCOPE_WALKED}}Instance state is not known yet: the first walk has not run.{{/DHCP_SCOPE_WALKED}}

DHCP server

DHCP server for routing domain {{DHCP_SCOPE_LABEL}}

Hand out addresses on this domain's networks, from a dhcpd of its own inside its routing table.

Hand out addresses on the networks you choose, from one OpenBSD dhcpd.

View leases {{#DRIFT_BADGE}}{{#B_UNSAVED}}Unsaved edits{{/B_UNSAVED}}{{#B_DRIFT}}{{B_LABEL}}{{/B_DRIFT}}{{#B_ERROR}}Drift state unknown{{/B_ERROR}}{{#B_OK}}In sync{{/B_OK}}{{/DRIFT_BADGE}}

Existing dhcpd configuration detected

This router has a /etc/dhcpd.conf that OgmaProtect does not manage. Applying from this page replaces it with the settings below. The current file is preserved to dhcpd.conf.preadopt before the first overwrite, and shown read-only here — it is never imported automatically.

{{LIVE_PREVIEW}}

Preview truncated — the full file is preserved on adoption.

Configured {{ENABLED_LABEL}} Server {{RUNNING_LABEL}}

The server's service state does not match the configuration — applying re-synchronizes it.

The live {{^DHCP_SCOPED}}/etc/dhcpd.conf{{/DHCP_SCOPED}}{{#DHCP_SCOPED}}/etc/dhcpd_rd/{{DHCP_SCOPE_RD}}.conf{{/DHCP_SCOPED}} differs from the saved configuration (hand-edited, or never applied) — applying overwrites it with the settings below.

DHCP server

Serve DHCP to devices on the selected networks

Served networks

Tick an interface to serve DHCP on its network.{{#DHCP_SCOPED}} Only interfaces in routing domain {{DHCP_SCOPE_LABEL}} can be served by its DHCP server.{{/DHCP_SCOPED}}

Rendered dhcpd.conf preview

Read-only {{^DHCP_SCOPED}}/etc/dhcpd.conf{{/DHCP_SCOPED}}{{#DHCP_SCOPED}}/etc/dhcpd_rd/{{DHCP_SCOPE_RD}}.conf{{/DHCP_SCOPED}} rendered from the saved configuration (re-rendered after each save; unsaved edits are not reflected).

{{RENDERED_PREVIEW}}

Preview truncated for display — validation and drift always use the full render.

{{#ADOPTION}}{{#WRITE}} Take ownership of the existing dhcpd configuration (preserved to dhcpd.conf.preadopt, then replaced) {{/WRITE}}{{/ADOPTION}}{{#WAN_CONFIRM}} Serve DHCP on {{WAN_IF}} even though it carries the default route{{#DHCP_SCOPED}} of routing domain {{DHCP_SCOPE_LABEL}}{{/DHCP_SCOPED}} — I understand this runs a DHCP server toward the upstream/WAN side, which is almost always wrong {{/WAN_CONFIRM}}{{#DISABLE_CONFIRM}} Stop the DHCP server for routing domain {{DHCP_SCOPE_LABEL}} — needed when turning it off while it is running; devices in that domain get no addresses from this router until it is turned on again {{/DISABLE_CONFIRM}}{{#RECLAIM_LEASES}} Load the leases the previous server held ({{RECLAIM_NOTE}}) — otherwise this server starts with an empty lease table and the old one stays on disk {{/RECLAIM_LEASES}}

Remove this domain's DHCP server

Stops the server for routing domain {{DHCP_SCOPE_LABEL}} if it is running, deletes its configuration and removes its service. Its lease table is kept on disk for a server added later to take back.

Firewall

Ensure your firewall passes UDP ports 67 and 68 on {{HINT_SUBNETS}} so clients can reach this server. This page never changes firewall rules — manage them on the Firewall page.

Live DHCP server log (dhcpd)

Open to stream dhcpd events.

Time	Source	Program	Message

Scoped to the dhcpd tag in /var/log/daemon.{{#DHCP_SCOPED}} Every domain's server logs under that tag: the lines naming one of this domain's networks (via <interface>) are its own; lines naming no network (startup, lease-file warnings, a relay's address) are marked unattributed and shown for every domain.{{/DHCP_SCOPED}} Watch DHCPDISCOVER / DHCPOFFER / DHCPACK negotiations as devices join. Requires the log:*:read capability.

Existing dhcpd configuration detected

DHCP server

Served networks

Static reservations

Remove this domain's DHCP server

Firewall