Addressing
Every network uses the same layout. Known devices get a fixed address through a DHCP reservation, so every address lives in one file on the firewall.
The layout#
| Range | Use |
|---|---|
.1 | The firewall, as gateway, DNS and NTP |
.2 to .9 | Network infrastructure |
.10 to .149 | Devices with a fixed address |
.150 to .199 | DHCP pool for unknown and guest devices |
.200 to .254 | Service addresses, in the server network only |
Even the cluster nodes stay on DHCP reservations rather than static configuration. Phones and laptops use a fixed private Wi-Fi address per network, so their reservations hold.
The SIEM names every internal address from a small CSV file next to the reservations, so a log line says which device it was.