Hi. I am trying to configure our Vigor 2952 (latest firmware) to use a LAN DHCP range beyond the 255 IP addresses in 10.0.0.x. We are using Windows DHCP server to assign the IP addresses but when these are set on the client computer, for example 10.0.2.11 we lose internet access. IP addresses in the range 10.0.0.2 to 10.0.0.255 work but anything beyond this does not.

We have Enabled LAN 1 DHCP configuration to Enable relay to our 1st DHCP Server IP Address. Which works okay.

We have set "For NAT usage" IP Address of 10.0.0.1 and subnet mask 255.255.248.0 / 21 which matches the DHCP scope within the Windows DHCP server but when an IP address is provided to the client computer beyond 10.0.0.x internet access is lost.

Are there any other settings we should be looking for in the router to allow larger LAN IP address ranges?

Thanks for your help.
Carl

Nothing leaps out as being wrong, but ...

it@engage.co.uk wrote:
We have set "For NAT usage" IP Address of 10.0.0.1 and subnet mask 255.255.248.0 / 21 which matches the DHCP scope within the Windows DHCP server but when an IP address is provided to the client computer beyond 10.0.0.x internet access is lost.

If I try the 2952 emulator at http://eu.draytek.com:12952/ , I can't set "For NAT usage" for any of the LANs - it's hard-coded (as "NAT"). However, the option is there for "DMZ Port" and "IP Routed Subnet".

Which are you using for your clients?

It's within the panel on the Left, it reads currently:

Network Configuration
For NAT Usage
IP Address : 10.0.0.1
Subnet Mask : 255.255.248.0 / 21

But when the Windows DHCP server assigns IP addresses 10.0.0.1 - 10.0.0.255 this is fine, the minute it assigns addresses 10.0.1.1 upwards it doesn't work.

Thanks
Carl

it@engage.co.uk wrote:
But when the Windows DHCP server assigns IP addresses 10.0.0.1 - 10.0.0.255 this is fine, the minute it assigns addresses 10.0.1.1 upwards it doesn't work.

Well there's a slight misconfiguration: You have set the static address of the 2952 to be 10.0.0.1 (on that LAN), so 10.0.0.1 should be excluded from the address range to be given to clients.(May just be a typo, because Message #1 mentions 10.0.0.2)

Are addresses > 10.0.0.255 being regularly issued? (Do you have more than 255 LAN clients?)

Could you confirm the "IPConfig" output from a client that doesn't work - and also the output from a "Traceroute/tracert" to somewhere on the Internet (8.8.8.8 )