Friday, December 23, 2016

Solving DHCP Scope exhaustion - multiple /24 subnets or a single /23 subnet?

We have a client with a remote site with a 10.0.9.0/24 network. The DHCP scope on this network is nearly exhausted, with only about 20 addresses available. We could possibly increase this to 30 by re-IPing some static devices and shrinking our exclusion range. This may not be a long-term solution.




I've been tasked with engineering a long-term solution. Caveat: It's been 14 years since I did any serious Cisco router/switch configuration.



It was recommended that I create 3 additional VLANs with 3 additional subnets (10.0.10.0, etc). This has the advantage of allowing me to leave most of my static assigned IPs alone, but requires a ton of switch and router configuration for inter-VLAN routing. With a single DHCP server, this complicates the DHCP setup as well, with multiple DHCP scopes and a superscope. Most of this configuration can be done with minimal or no downtime for clients.



The other option is to resubnet the site to 10.0.10.0/23. I would have to re-IP every static device, but changing IPs and subnet masks is a bit easier (for me) than configuring multiple VLANs and inter-VLAN routing across 4 different subnets.
(Note: The 10.0.8.0/24 network is in use at another site, so we can't use 10.0.8.0/23 to avoid changing the 10.0.9.* IP addresses at this site.) This configuration will require significant downtime as network devices are re-IPd.



My understanding between the two solutions is that a single /23 subnet has a larger broadcast domain (510 clients) where as 4 /24 subnets have 4 smaller broadcast domains. With ~220 devices, I don't see broadcast traffic as a significant factor. The switches in use are Cisco 2960-s models with limited layer-3 capability. Therefore most of the inter-VLAN routing would fall back on the site's router, increasing router overhead.




Is there an industry standard preferred method for resolving DHCP scope exhaustion? Are there any pros/cons to either solution that I haven't mentioned here that may make a difference? Is there a third, better solution?



More Info:
Since whatever I do, I'm re-engineering this network, I'm trying to identify what the "right" solution is. If this were a new network that would support more than 254 devices, would it be better to build a single /23 subnet or multiple /24 subnets?



If I remembered all of my CCNA training from 2002, adding new /24 subnets and VLANs might be trivial. But I know from experience that it's not so trivial to maintain. I am looking for advice as to which solution will cause me the least amount of pain now and a year from now.

No comments:

Post a Comment

linux - How to SSH to ec2 instance in VPC private subnet via NAT server

I have created a VPC in aws with a public subnet and a private subnet. The private subnet does not have direct access to external network. S...