IP Address Allocation

Example IP address allocation scheme for Pimeleon router deployment


IP Address Allocation

Example IP address allocation scheme for a typical Pimeleon router deployment. Customize these ranges for your specific network requirements.

Network Overview

  • Router Model: Raspberry Pi 4 or 3B+
  • Domain: Example: pimeleon.local or your custom domain
  • Management Interface: LAN interface (eth1 or wlan0)
  • Typical Capacity: 100-150 devices depending on hardware
  • Architecture: Dual-interface with optional WiFi segmentation

Network Configuration

InterfaceNetworkSubnet MaskGatewayPurposeDevice Limit
eth0DHCP from ISPISP providedISP gatewayWAN (Internet)N/A
eth1192.168.76.0/24255.255.255.0192.168.76.1Wired LAN (Trusted)~150
wlan0192.168.76.0/24255.255.255.0192.168.76.1Wireless LAN~30

Note: In single-subnet mode (default), both eth1 and wlan0 use the same network. For segregated WiFi, use 192.168.77.0/24 for wlan0.

Static IP Reservations

Infrastructure Services

Reserve low IP addresses (x.x.x.1-50) for infrastructure and static devices:

HostnameIP AddressMAC AddressInterfaceServiceNotes
pimeleon.local192.168.76.1b8:27:eb:xx:xx:xxeth1PimeleonLAN gateway
pimeleon.local192.168.76.1b8:27:eb:xx:xx:xxwlan0PimeleonWiFi gateway (same IP)
nas.local192.168.76.5aa:bb:cc:dd:ee:ffeth1NAS ServerNetwork storage
workstation.local192.168.76.1011:22:33:44:55:66eth1WorkstationPrimary computer
printer.local192.168.76.1500:11:22:33:44:55wlan0Network PrinterWireless printer

Service Ports

All services listen on the Pimeleon router IP address (192.168.76.1):

ServicePort(s)ProtocolAccessNotes
SSH22TCPLAN onlySecure management access
DNS53UDP/TCPLAN onlyDNS resolution
DHCP Server67UDPLAN onlyIP address assignment
HTTP80TCPLAN onlyPimeleon web interface
HTTPS443TCPLAN onlyPimeleon web interface (SSL)
Proxy (optional)3128TCPLAN onlyHTTP caching proxy (if enabled)

Security Note: All management services are only accessible from LAN. WAN access is blocked by firewall rules.

DHCP Address Ranges

Single-Subnet Mode (Default)

Both wired and wireless devices on same network:

  • Network: 192.168.76.0/24
  • DHCP Range: 192.168.76.100 - 192.168.76.250 (~150 addresses)
  • Reserved Static: 192.168.76.1 - 192.168.76.99
  • Lease Time: 12 hours (default)
  • Max Lease: 7 days
  • Gateway: 192.168.76.1
  • DNS Servers: 192.168.76.1 (Pimeleon router)

Dual-Subnet Mode (Optional WiFi Segregation)

Separate wireless network for guest/IoT devices:

Wired LAN (Trusted):

  • Network: 192.168.76.0/24
  • DHCP Range: 192.168.76.100 - 192.168.76.250
  • Interface: eth1

Wireless LAN (Guest/IoT):

  • Network: 192.168.77.0/24
  • DHCP Range: 192.168.77.100 - 192.168.77.250
  • Interface: wlan0
  • Isolation: Restricted access to wired network

IP Address Planning

Reserved Ranges

RangePurposeNotes
192.168.76.1Pimeleon routerGateway, DNS, DHCP server
192.168.76.2-50InfrastructureServers, NAS, printers, AP
192.168.76.51-99Static assignmentsWorkstations, smart home hubs
192.168.76.100-250DHCP poolDynamic client devices
192.168.76.251-254Future expansionReserved for additional services

Example Static Assignments

Configure these in your router's DHCP reservation settings:

# Infrastructure (2-50)
192.168.76.10   printer.local       # Network printer
192.168.76.15   ap.local            # WiFi access point (if using external)

# Workstations (51-99)
192.168.76.51   desktop.local       # Primary desktop
192.168.76.52   laptop.local        # Laptop
192.168.76.60   smarthub.local      # Smart home hub

# DHCP Pool (100-250)
# Phones, tablets, IoT devices get dynamic IPs here

WAN/Upstream Network

Pimeleon router's WAN interface connects to your ISP:

ParameterTypical ValueNotes
WAN Interfaceeth0Primary Ethernet port
IP AssignmentDHCP from ISPOr static if provided by ISP
Public IPDynamicAssigned by ISP
Upstream DNS1.1.1.1, 8.8.8.8Fallback if local DNS fails
NTP Serverspool.ntp.orgTime synchronization

Configuration Files

Key configuration file locations:

  • DHCP Server: /etc/dnsmasq.d/pimeleon-dhcp.conf
  • Network Interfaces: /etc/network/interfaces or /etc/systemd/network/
  • DNS Configuration: /etc/dnsmasq.conf
  • WiFi Access Point: /etc/hostapd/hostapd.conf
  • Firewall Rules: /etc/iptables/rules.v4 or equivalent

Best Practices

IP Address Management

  1. Document all static assignments - Keep a spreadsheet or text file
  2. Use consistent naming - hostname.local or hostname.domain
  3. Reserve sufficient space - Don't use entire /24 for DHCP
  4. Group by function - Infrastructure low, workstations mid, DHCP high
  5. Plan for growth - Leave room for future devices/services

DHCP Configuration

  1. Appropriate lease times:
    • Mobile devices: 2-4 hours
    • Workstations: 12-24 hours
    • Servers: Static IPs instead of DHCP
  2. Enable DHCP reservations for semi-static devices
  3. Monitor DHCP pool usage to avoid exhaustion
  4. Use descriptive hostnames for easier identification

Security Considerations

  1. Disable WAN management access - Only allow from LAN
  2. Use strong passwords for router access
  3. Segment guest WiFi if hosting untrusted devices
  4. Monitor DHCP logs for unauthorized devices
  5. Keep reserved IPs outside DHCP range

← Previous: IP Addressing | [🏠 Documentation Home//) | Next: Network Topology →