# DHCP Configuration

## DHCP Server
- Server: pfSense (pfsense.cascades.local)
- Server IP: 192.168.0.1

## Scopes

### LAN Scope
- Interface: LAN (192.168.0.0/22)
- Range: 192.168.2.2 - 192.168.3.254
- Enabled: Yes
- DHCP Option 43: Configured (UniFi controller discovery)

### INTERNAL (VLAN 20) Scope
- Interface: INTERNAL (10.0.20.0/24)
- Range: 10.0.20.50 - 10.0.20.239
- Enabled: Yes
- DNS Server: 192.168.0.1

### GUEST (VLAN 50) Scope — ADDED 2026-03-06
- Interface: GUEST (10.0.50.0/24)
- Range: 10.0.50.50 - 10.0.50.239
- Enabled: Yes
- DNS Server: 10.0.50.1

### 999GuruTestNet Scope
- Interface: 999GuruTestNet (10.0.99.0/28)
- Range: 10.0.99.2 - 10.0.99.14
- Enabled: Yes
- Domain: 99.cascades.local
- DNS Server: 10.0.99.1

### Room VLAN DHCP Scopes (All Rooms)
Every room VLAN has DHCP enabled with a consistent pattern:
- Subnet: /28 per room
- Range: x.x.x.2 - x.x.x.14 (13 usable IPs per room)
- DNS: Defaults to pfSense interface IP (gateway)
- No static mappings

~~**Known Issue:** Room218 DHCP scope~~ **FIXED 2026-03-07** — Range end changed from 10.2.18.2 to 10.2.18.14

## Migration Plan — DHCP Changes (Phase 1.2)

### ~~New: GUEST Scope~~ — DONE 2026-03-06

Guest DHCP scope created (see GUEST scope above).

### LAN Static Mappings (DHCP Reservations)

| Device | MAC | IP | Purpose |
|--------|-----|-----|---------|
| Front Desk Epson ET-5800 | dc:cd:2f:82:2b:7a | 192.168.2.147 | Printer |
| Business Office Canon MF455DW | 80:a5:89:f6:71:9b | 192.168.3.227 | Printer |
| Marketing Brother MFC-L8900CDW | — (not on network) | 192.168.2.21 | Printer |
| 206 Health Services Brother | 00:20:6b:b3:4a:55 | 192.168.1.138 | Printer |
| MemCare MedTech Brother | c8:a3:e8:a2:dd:93 | 192.168.2.53 | Printer — online, dual-connected (WiFi+ethernet, needs fix) |
| MemCare Director Canon MF451CDW | 20:0b:74:b2:29:08 | 192.168.3.52 | Printer |
| Kitchen printer | — (not on network) | 192.168.0.121 | Printer |
| Epson (USW Port 8) | dc:cd:2f:22:09:69 | 192.168.2.207 | Printer |
| Canon (USW Port 45) | 74:bf:c0:fd:7a:64 | 192.168.2.230 | Printer |
| Printer-80A423 (Lite 8 Port 2) | f8:25:51:80:a4:23 | 192.168.2.202 | Printer |
| CS-QB VM | 00:15:5d:02:3b:02 | 192.168.2.228 | VoIP server (Hyper-V) |
| MDIRECTOR-PC | 98:ee:cb:9d:8a:81 | 192.168.3.20 | MemCare Director staff PC |

### INTERNAL Static Mappings

| Device | MAC | IP |
|--------|-----|-----|
| SALES4-PC | — (not on network) | 10.0.20.203 |
| CRYSTAL-PC | f0:09:0d:0d:fc:a7 | 10.0.20.205 |
| ACCT2-PC | 98:8d:46:f1:2d:c2 | 10.0.20.209 |
| DESKTOP-KQSL232 | c8:ff:28:64:8a:9f | 10.0.20.227 |
| CHEF-PC | 98:ee:cb:9d:8a:84 | 10.0.20.232 |
| DESKTOP-H6QHRR7 | f0:09:0d:0d:fe:e9 | 10.0.20.235 |

### Fix: Room 218

Change DHCP range end from `10.2.18.2` to `10.2.18.14`.

See `migration/phase1-network.md` for full steps.

## DHCP Relay
- Not configured (pfSense serves DHCP directly on all interfaces)