Client computer that not on DHCP scope

Just a newbie for setup NGAF but facing some issue.

For example I created the DHCP scope is 192.168.0.1 to 192.168.0.100
If I reserve the IP address, such as 192.168.0.101, it will alert me "The IP address is not in the IP pool."

Because I am using Sonicwall that I can assign the IP range, and also can reserve the IP address for computer that out of the range, no need must in the IP address range.

When setting up NGAF (Next-Generation Application Firewall), there might be some differences in how IP address assignment works compared to other firewall devices like Sonicwall. In NGAF, when configuring a DHCP scope, the reserved IP address must be within the specified IP pool range. This means that if you have set the DHCP scope from 192.168.0.1 to 192.168.0.100, the reserved IP address should also fall within this range.

If you want to reserve an IP address outside the defined IP pool range, you may need to modify the DHCP scope to include that specific address. In your case, if you want to reserve the IP address 192.168.0.101, you should adjust the DHCP scope to cover this address by expanding the range from 192.168.0.1 to 192.168.0.101.

Keep in mind that NGAF follows this approach to ensure that IP address assignment remains consistent and within the defined range. It's recommended to review the NGAF documentation or consult with the vendor's support team for specific guidance on configuring DHCP scopes and IP address assignment in NGAF.

HiHi,

It appears that the DHCP scope has not been configured correctly.
Please ensure that the start and end IP addresses for the DHCP scope cover 192.168.0.101.
Based on the information provided, it seems that the scope only goes from 192.168.0.1 to 192.168.0.100, which means that 192.168.0.101 is outside of that range.
To address this issue, you will need to expand the DHCP scope to include .101.

It seems like you are facing an issue with assigning reserved IP addresses in the DHCP scope of NGAF (Next-Generation Application Firewall). The error message you mentioned indicates that the reserved IP address is not within the defined IP pool.

In NGAF, the DHCP scope defines the range of IP addresses that can be dynamically assigned to devices on your network. By default, reserved IP addresses should fall within the specified DHCP scope range. However, it's possible that NGAF has a strict requirement that reserved IP addresses must be within the defined IP pool.

Adjust the DHCP scope: If possible, modify the DHCP scope in NGAF to include the desired reserved IP address. Expand the range to accommodate the reserved IP address, ensuring it falls within the defined IP pool.

Use a static IP address: Instead of reserving an IP address within the DHCP scope, consider configuring a static IP address directly on the device you want to assign the reserved IP to. This bypasses the DHCP assignment process altogether.

The best practice on this DHCP Setup is to make a DHCP POOL that has the full number. Example is to have atleast /24. Then thats the time that you must exclude addresses.

Also the best practice is to only have 1 DHCP server. If your Sonic wall is the existing DHCP then NGAF must not be a DHCP Server

Is the Sonic Wall still exist?

You have declare a DHCP Pool and only the range you can exclude.

Add to the created DHCP the 192.168.0.101 to correct this

You must extend the scope of the DHCP Pool.

You can't exclude an IP that is not inside the scope of the DHCP Pool. It is a common sense!