Large DHCP Lease Pool

Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking
Author Message
ian5142
DD-WRT Guru


Joined: 23 Oct 2013
Posts: 2335
Location: Canada

PostPosted: Sat Jun 07, 2025 2:07    Post subject: Large DHCP Lease Pool Reply with quote
Hello All,
I am trying to set up a DD-WRT PC (x86_64 build, most recent version), paid version. It is running on an AMD Phenom(tm) II X4 840T Processor with 16GB of RAM and an SSD. 2 PCI-E Ethernet cards are installed as well. 1 is four-port, 1 is one-port.

I need to subnet the network so that there is a DHCP Lease Pool of about 10,000 or so. 1,000 addresses might work with a really low lease time of 1 hour or something.

Attached a screenshot of the current DHCP settings that I have tried. I can't put a number larger than 254 in the maximum IP address block.



DHCP Settings.jpg
 Description:
DHCP Settings screenshot
 Filesize:  75.18 KB
 Viewed:  17990 Time(s)

DHCP Settings.jpg



_________________
Before asking a question on the forums, update dd-wrt: Where do I download firmware? I suggest reading it all.
QCA Best WiFi Settings


Some dd-wrt wiki pages are up to date, others are not. PM me if you find an old one.

Atheros:
Netgear R7800 x5 - WDS AP / station, gateway, QoS
TP-Link Archer C7 v2 x2 - WDS Station
D-Link 615 C1/E3/I1 x 7 - 1 WDS station
D-Link 825 B1 - Not used
D-Link 859 - WDS Station
D-Link 862L A1 x2 - WDS Station
UBNT 5AC loco x2 - airOS
UBNT loco M2 x2 - airOS

Broadcom
Linksys EA6400 - Gateway, QoS
Asus N66U - AP
Netgear R6400 - AP
MediaTek
UBNT EdgeRouter X - switch
Netgear R6350 - AP
Sponsor
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 16814
Location: Texas, USA

PostPosted: Sat Jun 07, 2025 3:29    Post subject: Reply with quote
The lowest you can go is /22 because the max is 999 and you won't get all available addresses.

https://svn.dd-wrt.com/browser/opt/etc/config/base.nvramconfig#L63

_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
RSS feed for DD-WRT releases (2025)
RSS feed for DD-WRT releases (2024)
RSS feed for DD-WRT releases (2023)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
lexridge
DD-WRT Guru


Joined: 07 Jun 2006
Posts: 2152
Location: WV, USA

PostPosted: Sat Jun 07, 2025 4:42    Post subject: Reply with quote
You may be able to set up 10 or more bridges on different IPs and assign a dhcp server for each one. You will probably also want to enable the recently added ARPd service.
_________________
- Linksys EA8500: I-Gateway, WAP/VAP 5ghz only. Features: VLANs, Samba, WG, Entware - r60xxx
- Linksys EA8500: 802.11s Secondary w/VLAN Trunk over 5ghz - r60xxx
- Linksys MX4300: 802.11s Primary w/VLAN Trunk over 5ghz. 2.4ghz WAP/VAP only - r60xxx
- Linksys MX4300: (WAP/VAP (7)) Multiple VLANs over single trunk port. Entware/Samba r60xxx
- Linksys MR7350: WDS Station for extended Ethernet r60xxx
- Linksys MR7500, MX8500: None in production. Just testing. r60xxx
- OSes: Fedora 40, 10 RPis (2,3,4,5), 23 ESP8266s: Straight from Amiga to Linux in '95, never having owned a Windows PC.
- Forum member #248
lexridge
DD-WRT Guru


Joined: 07 Jun 2006
Posts: 2152
Location: WV, USA

PostPosted: Sat Jun 07, 2025 5:12    Post subject: Reply with quote
I just did some quick testing. I set up one additional bridge br1 and assigned the IP of 10.0.0.1/17. I then created a new dhcp server for br1 with a start IP of 2 and a max of 10000. Note, I did this on a router, not a x86 PC, but should work the same regardless.

I assigned wlan0.1 to br1 to test by connecting via my phone. I got an IP of 10.0.35.70 so it appears to be working. Also, the 254 limit doesn't seem to exist on additionally created dhcp servers under the Networking tab, as it does on the Basic Setup tab.

So it looks like you will only need to create one bridge and one new dhcp server attached to it to make this work.

EDIT: Also tested on a spare lan port on my pc and got an IP of 10.0.22.140/17. I simply assigned lan3 on the router to br1 to test this.

_________________
- Linksys EA8500: I-Gateway, WAP/VAP 5ghz only. Features: VLANs, Samba, WG, Entware - r60xxx
- Linksys EA8500: 802.11s Secondary w/VLAN Trunk over 5ghz - r60xxx
- Linksys MX4300: 802.11s Primary w/VLAN Trunk over 5ghz. 2.4ghz WAP/VAP only - r60xxx
- Linksys MX4300: (WAP/VAP (7)) Multiple VLANs over single trunk port. Entware/Samba r60xxx
- Linksys MR7350: WDS Station for extended Ethernet r60xxx
- Linksys MR7500, MX8500: None in production. Just testing. r60xxx
- OSes: Fedora 40, 10 RPis (2,3,4,5), 23 ESP8266s: Straight from Amiga to Linux in '95, never having owned a Windows PC.
- Forum member #248
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 13880
Location: Netherlands

PostPosted: Sat Jun 07, 2025 6:24    Post subject: Reply with quote
You are talking about an installation with 10000 concurrent users and want to put them in one broadcast domain?

You must be joking.

I suggest you hire professional help and use professional equipment for that kind of installations Smile

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
lexridge
DD-WRT Guru


Joined: 07 Jun 2006
Posts: 2152
Location: WV, USA

PostPosted: Sun Jun 08, 2025 5:55    Post subject: Reply with quote
egc wrote:
You are talking about an installation with 10000 concurrent users and want to put them in one broadcast domain?

You must be joking.

I suggest you hire professional help and use professional equipment for that kind of installations Smile

This is quite a task for sure and not likely to work with dd-wrt in any configuration, scalable or not. You could not use dd-wrt as a gateway device for sure, for 10k connections at any speed. It was great fun to test and see if the dhcp server could handle it. Of course I cannot test 10000 connections, but at least the dhcp server randomly assigned IP addresses over the full subnet. I'm pretty sure Pi-Hole could handle that too for that matter...but pretty impressive still imo. While dd-wrt may very well be able to handle the dhcp server for 10000 connections, it would require professional equipment and a huge pipe to allow any bandwidth into VERY fat (multiple) gateways.

_________________
- Linksys EA8500: I-Gateway, WAP/VAP 5ghz only. Features: VLANs, Samba, WG, Entware - r60xxx
- Linksys EA8500: 802.11s Secondary w/VLAN Trunk over 5ghz - r60xxx
- Linksys MX4300: 802.11s Primary w/VLAN Trunk over 5ghz. 2.4ghz WAP/VAP only - r60xxx
- Linksys MX4300: (WAP/VAP (7)) Multiple VLANs over single trunk port. Entware/Samba r60xxx
- Linksys MR7350: WDS Station for extended Ethernet r60xxx
- Linksys MR7500, MX8500: None in production. Just testing. r60xxx
- OSes: Fedora 40, 10 RPis (2,3,4,5), 23 ESP8266s: Straight from Amiga to Linux in '95, never having owned a Windows PC.
- Forum member #248
ian5142
DD-WRT Guru


Joined: 23 Oct 2013
Posts: 2335
Location: Canada

PostPosted: Sun Jun 08, 2025 23:27    Post subject: Some more assistance Reply with quote
OK, progress.
I was able to do what Lexridge suggested about creating br1, the Ethernet ports are then unbridged from the main bridge (br0) and assigning a bunch of my Ethernet ports to it, br1. Then creating a second DHCP server for br1. The problem is, I tested the setup with 2 different computers.

br0 - IP 192.168.128.1 / 17, DHCP range start IP: 192.168.250.1 - 192.168.250.254
br1 - IP 192.168.128.1 / 17, DHCP range start IP: 192.168.129.2 - 192.168.130 ++, I didn't calculate it exactly but 4000 addresses total. To make it easier to tell, I also changed the lease time on br1 to 120 minutes.

The weird part is both computers get an IP address, but one is from the DHCP pool for br0 and the other from br1. They are both plugged into ports that should be getting IPs from br1.

Also, small GUI issue, can't see the Root MAC in br1, it is a � symbol or some other character, changes when the page reloads.

I can provide screenshots if required.
DWCruiser
DD-WRT User


Joined: 15 Aug 2016
Posts: 291
Location: Melbourne, Australia

PostPosted: Mon Jun 09, 2025 2:12    Post subject: Reply with quote
Without fully understanding the issues involved, my first reaction to the stated overlapping networks in br0 and br1 would be a network design vulnerable to complications and confusions down the track.

While in theory a network of /17 would give you some 32,768 usable IP addresses, practical limitations RAMs and CPU power on a consumer-grade router, may result in its developers placing restrictions on the router's OS. Unbeknown to users.

It's simply a case of 'Horses for Courses'.

I note you are configuring it on a PC hardware platform, it runs on DDWRT. No necessarily designed for industrial usage. I may be wrong here.

As egc suggested, you may need professional help for scoping cover.

_________________
Life is a journey; travel alone makes it less enjoyable and lonely.
___________________________________________________
2x Netgear R9000 & 2x XR700
Features:
- Gateway
- Overclocked -2000MHz
- SmartDNS, DDNS
- Both 5GHz & 2.4GHz using DDWRT
(not Vanilla component)
- Private Home network on default br0 bridge together with vlan1 + wlan0 & 1
- Isolated port-based VLANS, placed on bridges + vAPs (wlan0.1 & 1.1) for guests & IoT devs)
- WireGuard Server for secure on-the-road access & remote control of devices @home
- OpenVPN Client for incognito & o/seas based programs
- 10G SFP+ connected to RB5009 (via optical fiber)
- QoS - HFSC/FQ_CODEL deployed on ISP's 500/50mbps connection
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 16814
Location: Texas, USA

PostPosted: Mon Jun 09, 2025 3:10    Post subject: Reply with quote
Using the same subnet for both br0 and br1 is going to cause problems.
_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
RSS feed for DD-WRT releases (2025)
RSS feed for DD-WRT releases (2024)
RSS feed for DD-WRT releases (2023)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
lexridge
DD-WRT Guru


Joined: 07 Jun 2006
Posts: 2152
Location: WV, USA

PostPosted: Mon Jun 09, 2025 4:55    Post subject: Re: Some more assistance Reply with quote
ian5142 wrote:
The weird part is both computers get an IP address, but one is from the DHCP pool for br0 and the other from br1. They are both plugged into ports that should be getting IPs from br1.

@kp69 is correct. You need to have br1 on a completely different subnet from br0.
ian5142 wrote:

Also, small GUI issue, can't see the Root MAC in br1, it is a � symbol or some other character, changes when the page reloads.

This is a known issue that will hopefully get fixed soon. Seems to be cosmetic only which is good. The bridges do indeed get a valid MAC addresses as doing an ifconfig or ip a clearly shows but the webui does not.

Edit: Also, a /17 subnet give you plus 32k addresses. Why not go with /18 instead which give you 16k+ addresses. /19 gives less than 10k but how many do you really need? This could work with dd-wrt if you are wanting to monitor 10K sensors with low bandwidth and don't need Internet access. Very Happy With 10k actual human users, you would need BIG stuff to do this.

_________________
- Linksys EA8500: I-Gateway, WAP/VAP 5ghz only. Features: VLANs, Samba, WG, Entware - r60xxx
- Linksys EA8500: 802.11s Secondary w/VLAN Trunk over 5ghz - r60xxx
- Linksys MX4300: 802.11s Primary w/VLAN Trunk over 5ghz. 2.4ghz WAP/VAP only - r60xxx
- Linksys MX4300: (WAP/VAP (7)) Multiple VLANs over single trunk port. Entware/Samba r60xxx
- Linksys MR7350: WDS Station for extended Ethernet r60xxx
- Linksys MR7500, MX8500: None in production. Just testing. r60xxx
- OSes: Fedora 40, 10 RPis (2,3,4,5), 23 ESP8266s: Straight from Amiga to Linux in '95, never having owned a Windows PC.
- Forum member #248
Alozaros
DD-WRT Guru


Joined: 16 Nov 2015
Posts: 7114
Location: UK, London, just across the river..

PostPosted: Mon Jun 09, 2025 7:16    Post subject: Reply with quote
once you make it with the DHCP, than you have to fiddle with

Administration > Maximum Connections on my Dynalink are 24576 by default...but if you ve
30k addresses you may need to make it up high ---max is 1048576

same goes for DNSmasq if you use it..you'd need to increase
Maximum Concurrent Requests -- default is 150 but, you may need way more than that...i had a case where i needed to up the number to 350, i think with DNSmasq max is 500..and this is very busy network....with 30k clients..not very sure if DNSmasq can handle such a network...

I guess with decent CPU and lots of ram and good WAN pipe(SFP) you can handle the enterprise network....but, im curious for how long ... and what will be the overall performance... Cool

_________________
Atheros
TP-Link WR1043NDv2 -DD-WRT 62606 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear XR500 -DD-WRT 63600 GTW/SmDNS/DoT,AD-Blk,Forced DNS,AP&Net Isolation,x2VLAN,Vanilla
Netgear R7800 --DD-WRT 62606 Gateway/DNSCryptv2,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla,VPN cli
Netgear R9000 --DD-WRT 62606 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Dynalink DL-WRX36-DDWRT 62606
Broadcom
Netgear R7000 --DD-WRT 63790 GTW/DNScrypt-proxy2/AD-Block,IPset Firewall,Forced DNS,x4VLAN,VPN cli
NOT USING 5Ghz ANYWHERE
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
ian5142
DD-WRT Guru


Joined: 23 Oct 2013
Posts: 2335
Location: Canada

PostPosted: Mon Jun 09, 2025 22:46    Post subject: Found my issue Reply with quote
Yes, you were correct. My issue was that br0 and br1 were overlapping. I changed the subnet to /20. Then made br0 vastly different from br1.

Now both PCs get IPs from br1's DHCP pool, like they are supposed to.
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum