Saturday, August 18, 2018

ip - If I change a router's subnet mask to one that includes the old one, will the hosts with the old configuration still work?



Currently I have a router that is addressed as 10.2.1.1 on a 10.2.1.0/24 network. All of my hosts have default gateway 10.2.1.1 with mask 255.255.255.0.




I want to know: if I change my router to 10.2.0.0/16 will the hosts that have subnet mask corresponding to /24 still work in the interim (before I reconfigure)?



EDIT: If it is not possible, what is the best way to transition from a smaller subnet to a larger subnet, assuming these are all Windows hosts behind a pfSense device?



EDIT 1: For clarification, I will keep the router address as 10.2.1.1, just make the subnet bigger (/16 instead of /24).


Answer



It would work somewhat. It depends on how you define work. If you change the netmask on you router, so that instead of having 10.2.1.1/24 it will have 10.2.1.1/16 then:



A host with a 10.2.1.0/24 address could still reach any system with an address between 10.2.1.0-10.2.1.255 with a mask of /24 or /16. The systems would simply use arp resolution and connect directly to the each other. Since from the perspective of both systems they will each be on their local network.




A host with a 10.2.1.0/24 would be able to connect to any host outside of the 10.2.0.0/16 network. It would ARP for the gateway address and connect through the via your router.



The only thing they couldn't reach is hosts on 10.2.0.0/16, but not in the 10.2.1.0/24 range. The host with an address in 10.2.1.0/24 would try to connect via the router, but a host on that subnet, but outside of 10.2.1.0/24 would try to connect directly. Even this can be mitigated, on some routers using something called proxy-arp. You basically have to convince the router to reply to ARP requests on behalf of a system with a 10.2.1.0/24 when the request came from a system not within that subnet.



The key point here is that will work somewhat, but you must fix the netmask on all your systems fixed to the new subnet before you start assigning address space from the other portion of the network.


No comments:

Post a Comment

linux - How to SSH to ec2 instance in VPC private subnet via NAT server

I have created a VPC in aws with a public subnet and a private subnet. The private subnet does not have direct access to external network. S...