{"id":906,"date":"2020-06-18T11:04:29","date_gmt":"2020-06-18T18:04:29","guid":{"rendered":"https:\/\/SUMMALAI.COM\/?p=906"},"modified":"2020-06-18T11:04:29","modified_gmt":"2020-06-18T18:04:29","slug":"create-a-dhcp-lease-scope-dedicated-for-sonicwall-gvc-clients","status":"publish","type":"post","link":"https:\/\/SUMMALAI.COM\/?p=906","title":{"rendered":"Create A DHCP Lease Scope Dedicated For SonicWALL GVC Clients."},"content":{"rendered":"\n<p>DESCRIPTION:<\/p>\n\n\n\n<p>This article describes how to create a DHCP dynamic lease scope without binding it to any interface of the SonicWall UTM appliance. Such a lease scope can have an IP address range not configured on any interface of the SonicWall. This would be helpful in environments where the administrator requires GVC users to have IP addresses in a separate subnet.<\/p>\n\n\n\n<p>RESOLUTION:<\/p>\n\n\n\n<p><strong>DHCP Configuration in SonicWall<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\"><li>Login to your SonicWall management page and click&nbsp;<strong>Manage<\/strong>&nbsp;tab on top of the page.<\/li><li>Navigate to&nbsp;<strong>Network | DHCP Server<\/strong>&nbsp;settings page, make sure&nbsp;&nbsp;<strong>Enable DHCPv4 Server<\/strong>&nbsp;checkbox enabled.<\/li><li>Click&nbsp;<strong>Add Dynamic<\/strong>&nbsp;button under&nbsp;<strong>DHCPv4 Server Lease Scopes<\/strong>&nbsp;section to get&nbsp;<strong>DHCP Server Configuration<\/strong>&nbsp;window.<\/li><li>Update correct&nbsp;<strong>Range Start<\/strong>&nbsp;&amp;&nbsp;<strong>Range End&nbsp;<\/strong>along with Default Gateway (Including subnet mask).&nbsp;Configure a different DHCP range instead of&nbsp;interface assigned subnet.<\/li><li>Click&nbsp;<strong>OK<\/strong>&nbsp;.<br><img decoding=\"async\" src=\"https:\/\/sonicwall.rightanswers.com\/portal\/app\/images\/content_note.gif\" alt=\"\">&nbsp;<strong>NOTE:<\/strong>&nbsp;Do not enable the check box&nbsp;<strong>Interface Pre-Populate<\/strong>.<br><\/li><li>New DHCP Scope will be created as below with interface as&nbsp;<strong>N\/A.<br><\/strong><img fetchpriority=\"high\" decoding=\"async\" src=\"https:\/\/sonicwall.rightanswers.com\/portal\/app\/portlets\/results\/onsitehypermedia\/090170830563784.jpeg?linkToken=eyJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJzb25pY3dhbGwiLCJleHAiOjE2MjQwMzMzMzYsImlhdCI6MTU5MjQ5NzMzNn0.XowoyECTBye0uShWSDcwe6K-k8ZH8_0YW1TtftCrrSY\" alt=\"Image\" width=\"532\" height=\"117\"><\/li><\/ol>\n\n\n\n<hr class=\"wp-block-separator\"\/>\n\n\n\n<p><strong>&nbsp;DHCP over VPN Settings:<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\"><li>Navigate to<strong>&nbsp;Manage&nbsp;<\/strong>tab and go to<strong>&nbsp;VPN | DHCP over VPN<\/strong>&nbsp;page.<\/li><li>Under&nbsp;<strong>DHCP over VPN<\/strong>&nbsp;section, Select&nbsp;<strong>Central Gateway<\/strong>&nbsp;from drop-down box and click&nbsp;<strong>Configure<\/strong>&nbsp;button.<\/li><li>In&nbsp;<strong>DHCP over VPN Configuration<\/strong>&nbsp;Window, enable&nbsp;<strong>Use Internal DHCP Server<\/strong>&nbsp;checkbox.<\/li><li>Enable&nbsp;<strong>For Global VPN Client<\/strong>&nbsp;checkbox.<\/li><li><strong>Relay IP Address (optional):<\/strong>&nbsp;&nbsp;Add one of the IP address under &nbsp;for DHCP over VPN configurations.<\/li><li>Click&nbsp;<strong>OK<\/strong>&nbsp;.<\/li><li><img decoding=\"async\" src=\"blob:https:\/\/sonicwall.rightanswers.com\/c480defa-73ec-4d51-8bb1-d6a04c6223dd\" alt=\"\" width=\"508\" height=\"357\">Following the above configuration, GVC clients will be leased an IP address from the range&nbsp;<strong>192.168.10.x<\/strong>. If&nbsp;<strong>VPN Access List<\/strong>&nbsp;is configured, GVC users will be able to access the resource\/s added in it.<\/li><\/ol>\n\n\n\n<hr class=\"wp-block-separator\"\/>\n\n\n\n<h4 class=\"wp-block-heading\">RESOLUTION FOR SONICOS 6.2 AND BELOW<\/h4>\n\n\n\n<p>The below resolution is for customers using SonicOS 6.2 and earlier firmware. For firewalls that are generation 6 and newer, we suggest to\u00a0upgrade to the latest general release\u00a0of SonicOS 6.5 firmware.<\/p>\n\n\n\n<ol class=\"wp-block-list\"><li>Login to the SonicWall management GUI.<\/li><li>Navigate to the&nbsp;<strong>Network<\/strong>&nbsp;|&nbsp;<strong>DHCP Server.<\/strong><\/li><li>Enable check box&nbsp;<strong>Enable DHCP Server<\/strong>&nbsp;at the top, if not already checked. Click&nbsp;<strong>Accept<\/strong>.<\/li><li>Click&nbsp;<strong>Add Dynamic<\/strong>&nbsp;to bring up the&nbsp;<strong>Dynamic Range Configuration<\/strong>&nbsp;window.<\/li><li>Enable check box&nbsp;<strong>Enable this DHCP Scope<\/strong>.<\/li><li>Enter IP addresses under&nbsp;<strong>Range Start<\/strong>&nbsp;and&nbsp;<strong>Range End<\/strong>. These IP addresses must not be configured on any interface of the SonicWall.<\/li><li>Enter&nbsp;<strong>Lease Time.<\/strong><\/li><li>Enter the&nbsp;<strong>Default Gateway<\/strong>&nbsp;(This is optional).<\/li><li>Enter the&nbsp;<strong>Subnet Mask<\/strong>. This must be left blank if&nbsp;<strong>Default Gateway<\/strong>&nbsp;is not selected.<br><br><img decoding=\"async\" src=\"https:\/\/sonicwall.rightanswers.com\/portal\/app\/images\/content_note.gif\" alt=\"\">&nbsp;<strong>NOTE:<\/strong>&nbsp;Do not enable the check box&nbsp;<strong>Interface Pre-Populate.<br><\/strong><img decoding=\"async\" src=\"https:\/\/sonicwall.rightanswers.com\/portal\/app\/portlets\/results\/onsitehypermedia\/090170804497954.png?linkToken=eyJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJzb25pY3dhbGwiLCJleHAiOjE2MjQwMzMzMzYsImlhdCI6MTU5MjQ5NzMzNn0.XowoyECTBye0uShWSDcwe6K-k8ZH8_0YW1TtftCrrSY\" alt=\"Image\" width=\"354\" height=\"376\"><br><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/sonicwall.rightanswers.com\/portal\/app\/portlets\/results\/onsitehypermedia\/090170804659614.png?linkToken=eyJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJzb25pY3dhbGwiLCJleHAiOjE2MjQwMzMzMzYsImlhdCI6MTU5MjQ5NzMzNn0.XowoyECTBye0uShWSDcwe6K-k8ZH8_0YW1TtftCrrSY\" alt=\"Image\" width=\"613\" height=\"288\"><\/li><\/ol>\n\n\n\n<p><strong>By using the Relay IP Address option with an interface independent DHCP Lease Scope, GVC clients can be served IP Addresses from the dedicated pool above.&nbsp; To use this DHCP scope for GVC clients, perform the following:<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\"><li>Navigate to the&nbsp;<strong>VPN<\/strong>&nbsp;|&nbsp;<strong>DHCP over VPN<\/strong>&nbsp;page.<\/li><li>Click&nbsp;<strong>Configure<\/strong>&nbsp;under&nbsp;<strong>Central Gateway<\/strong>&nbsp;to bring up the&nbsp;<strong>DHCP over VPN Configuration<\/strong>.<\/li><li>Enable check box&nbsp;<strong>Use Internal DHCP Server.<\/strong><\/li><li>Enable check box&nbsp;<strong>For Global VPN Client.<\/strong><\/li><li>Enter an IP address outside the&nbsp;<strong>DHCP<\/strong>&nbsp;scope defined above under&nbsp;<strong>Relay IP Address.<br><\/strong><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/sonicwall.rightanswers.com\/portal\/app\/portlets\/results\/onsitehypermedia\/090170804350899.png?linkToken=eyJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJzb25pY3dhbGwiLCJleHAiOjE2MjQwMzMzMzYsImlhdCI6MTU5MjQ5NzMzNn0.XowoyECTBye0uShWSDcwe6K-k8ZH8_0YW1TtftCrrSY\" alt=\"Image\" width=\"360\" height=\"369\"><\/li><li>Following the above configuration, GVC clients will be leased an IP address from the range 192.168.168.x. If&nbsp;<strong>VPN Access List<\/strong>&nbsp;is configured, GVC users will be able to access the resource\/s added in it.<\/li><\/ol>\n\n\n\n<p><\/p>\n\n\n\n<p>Original: <a href=\"https:\/\/www.sonicwall.com\/support\/knowledge-base\/how-can-i-create-a-dhcp-lease-scope-dedicated-for-gvc-clients-not-bound-to-any-interface\/170505752351412\/#:~:text=DHCP%20over%20VPN%20Settings%3A,For%20Global%20VPN%20Client%20checkbox.\">https:\/\/www.sonicwall.com\/support\/knowledge-base\/how-can-i-create-a-dhcp-lease-scope-dedicated-for-gvc-clients-not-bound-to-any-interface\/170505752351412\/#:~:text=DHCP%20over%20VPN%20Settings%3A,For%20Global%20VPN%20Client%20checkbox.<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>DESCRIPTION: This article describes how to create a DHCP dynamic lease scope without binding it to any interface of the SonicWall UTM appliance. Such a lease scope can have an IP address range not configured on any interface of the SonicWall. This would be helpful in environments where the administrator requires GVC users to have <a class=\"read-more\" href=\"https:\/\/SUMMALAI.COM\/?p=906\">Read More<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_bbp_topic_count":0,"_bbp_reply_count":0,"_bbp_total_topic_count":0,"_bbp_total_reply_count":0,"_bbp_voice_count":0,"_bbp_anonymous_reply_count":0,"_bbp_topic_count_hidden":0,"_bbp_reply_count_hidden":0,"_bbp_forum_subforum_count":0,"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[13,9],"tags":[145],"class_list":["post-906","post","type-post","status-publish","format-standard","hentry","category-firewalls","category-networks","tag-sonicwall"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/posts\/906","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=906"}],"version-history":[{"count":0,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/posts\/906\/revisions"}],"wp:attachment":[{"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=906"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=906"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=906"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}