Why you use static IPs on your network infrastructure.
ฝัง
- เผยแพร่เมื่อ 5 ต.ค. 2024
- Network infrastructure devices should have static IP addresses -- always. From security, monitoring, and ensuring uninterupted service -- make sure you design your network properly with static IPs.
DS923+ Affiliate link: amzn.to/3YzcSPp
Synology SSD Affiliate link: amzn.to/3ln6YTa
Hire us! williehowe.com
Affiliate Links (I earn a small percentage of the sale if you use these links):
My AmazonLink: www.amazon.com...
HostiFi Affiliate Link: hostifi.net/?v...
Netool: netool.io use code WILLIEHOWE to save at least 10%!
Digital Ocean Affiliate Link: m.do.co/c/39aa...
Patreon Link: / williehowe
Contact us for network consulting and best practices deployment today! We support all Grandstream, Synology, DrayTek, Obihai, Poly, Ubiquiti, MikroTik, Extreme, Palo Alto, and more!
Come back for the next video!
Twitter - @WillieHowe
TikTok - @whowe82
SUBSCRIBE! THUMBS-UP! Comment and Share!
I came up old school, in the days before TCP/IP was a thing. Working for a large multinational corporation, they standardized everything. When IP became the norm, there was a template that was used. x.1 was the gateway, 2-10 were switches/routers, 11-30 servers, 30-50 other devices like APs etc., 50-75 for printers and network scanners. The rest of the /24 range could be assigned DHCP. Of course, modifications were made based on network size, but it kept everyone and everything in sync. We also put labels on those devices with static IP addresses so other folks coming behind of us could get the IP info quick.
Its not old school at all 😂
DHCP with reservations, I rarely do static any more. It makes it a lot simpler if I have to move hardware from site to site. The only thing I static is virtual servers because I don’t have to move them. Always use multiple dhcp servers.
Wait until you dhcp server dies and leases expire. Been there, done that.
@@WillieHowe 365 day leases and I use a dhcp server cluster called qip with about 50 dhcp server’s globally
@@WillieHowe wait until you must update DNS server settings on more than a handful of devices ;)
I tried static with reservation but sometimes I would still get a change of IP address. Not sure why it was happening. Static for routers, reservation for printers, mobile devices dhcp. I'm just dealing with home networking.
I 💯 agree. For anything that isn’t IoT. I’ve run into problems in the past with IoT devices using static
The IoT and Static IP issue may be system related. I have a UniFi system and 9 IoT devices running on Static IP addresses for the last few years with no issues so far. Knock on wood....
Great Video! even when i do small networks i use the same principal 1-10 Network equipment .11 & .12 are the DC's .13 is storage and so on DHCP start around .50. so even when i have a small doctors office or maybe a larger network i always know what is where.
Great video Willie, I think the only disadvantage of static IP's is that all of a sudden you want to create a new vlan and want to move some devices to the new vlan and the hard work of going one by one to fix it again. But nothing serious
Static IP Addresses are very important to make sure the critical network devices are always working. I learnt it the hard way. I took over a project and the previous person had the main printer/copier on DHCP, but installed the printer on all computers using its IP Address at the time. When the DHCP Server renewed all IP leases, it assigned the IP address of the Printer/Copier to another device. All of a sudden, no one's able to print.
That is what DHCP reservations are for.
For printers I like to do DHCP with reservations. If the DNS server changes, resolution of the SMTP / File server for scanning doesn't break... Also if you need to expand the subnet. Switches and servers I get. I also can go either way on APs. Static or DHCP with reservations.
This is why proper subnet planning is essential.
I agree. Core equipment set as static configured on the device. I still have a DHCP reservation setup for documentation. Rare for DHCP to go down, but it happens. I have a home network with VLANs and so on. I keep logs of changes to my network switch, pfSense and so on.
It's a MUST that all printers are setup wth WSD printing & set to DHCP :). OH and on WiFi too !! :). Happy thursday !
I agree for servers and switches. IMO - access points and phones can sit on DHCP. My UniFi controller sits on a different subnet than my access points. DHCP option 43 tells my access points where my controller is.
Phones I agree with unless they are door stations.
On my network IP's 1-99 are for static IP's. All of my wired devices have static IP's including Disk Station and the NVR
Static IP's & a well documented list .... best way to go for prime network infrastucture
For pretty much everything on my network, I use static defined IP addresses. I even set up my networks where the fourth octet is 2 digits if it is a static IP. If the fourth octet is 3 digits, then that is a dynamic IP address.
Preach it Willie!!
This is main point: DHCP server - fails. Many small businesses use of the shelf home routers and 2 things happens often due to poor programming DHCP hangs and because bad physical design WIFI start crap out after 1-2 years of use (bad power handling inside device, as soon as electrolytic caps dry out you WIFI will crap out really fast).
STATIC allllllll dayyyyyyy!! Great video - thanks Willi!
I agree I would always go static, and documentation is key. Kinda disappointed with how ipv6 has gone over thr past 10 years. I'm still seeing lots of new devices thst just don't work correctly. ISUP hikvision, port forwarding...
100% static for infrastructure! I generally allocate a certain number of IP's for a static range so I have room to grow and set dhcp outside of that range.
This is the way 😊
Question: 1500 cameras across 140+ wan links (office locations) with disparate NVRs in regions picking up the camera streams to record. Would you still suggest STATIC IP?
Using efficient IP as headend.
Yes. Unless the camera is sending the feed itself most NVRs rely on the IP of the camera to go out and grab the feed.
I can't say i disagree. I also find for whatever reason when the network is acting funky my static IP devices tend to still work which is why I leave my not just my infrastructure but even workstation on static ip
I agree with 99% of this (and even use a pretty similar set of rules on a /24: GW on .1, switches .2-9, servers .10 and up, printers .50 and up, and I usually start the DHCP scope at .100). The only piece where I differ is statics for APs. I do use Unifi, but I haven't run into an issue with my APs receiving dynamic addresses. Is there a specific reason for setting up the APs as static? especially since the numbers can vary wildly between network, I've always considered them more of a wired client device than infrastructure, but I may be a weirdo. I could see a case for printers in the same boat as well, but I'm not that weird, lol.
Radius controlled VLANs or 802.1x -- WPA Enterprise needs the IPs on your APs to not change.
@@WillieHowe Interestingly enough, I run RADIUS over DHCP'd APs. I just authorize the subnet scope on the NPS, not the specific IPs of the APs.
One word. Syslog. Have any important infrastructure worth reading reports from, it's a hassle if they change. Worse, if your DHCP doesn't come up for awhile stuff like wireless monitoring Security cams are suddenly useless. If you set the important stuff to work without DHCP, it's insurance.
Thanks for the awesome video, now I have a question, do you think it is better to set static IP on the device itself and keep it out of your dhcp range or you set it on the router via mac address ? thanks
On device.
but if you set a manual ip address to one device and you don't reserve that address in your dhcp server, that ip could be set to another device, what do you think is the best strategy to avoid this kind of problem in your local network?
Set your scope outside of your static block.
@@WillieHowe but what happen if you don't have control over the network router?
💯
Good morning, good morning mushroom coffee ready ☕
lets say ok somebody screwed up a firmware update that breaks static ips after a day your switches break can not access them or access points but dhcp does not break it is only the static setup that does I had this happen to me once they fixed the firmware I did go back to static yes
There's always going to be edge cases.
@@WillieHowe yes like mine but I also had the up in reservation as well just in case
Static IP address ( can be dangerous because its easier for Hackers to hack your network)
What?
@@WillieHowebecause the static address never changes so it makes it very easy for hackers to steal your're information
@@edwardolopaz naw
@@WillieHowe no very true because hackers do it all time because I do it very easy