Sophos – P4 Sophos Firewall DHCP Reservation

Assign Static IP the Right Way

In modern network environments, managing IP addresses properly is essential for stability, monitoring, and security. One of the most efficient ways to maintain consistent IP allocation without manual configuration on endpoints is by using Sophos Firewall DHCP reservation.

With DHCP reservation, you can:

🔹 Assign a fixed IP address to a device based on its MAC address
🔹 Ensure the device always receives the same IP address
🔹 Avoid configuring static IP directly on the machine
🔹 Maintain centralized control from the DHCP server

This method is ideal for:

• Servers

• Printers

• Network cameras

• Access points

• Critical infrastructure devices

In this guide, you will learn how to configure Sophos Firewall DHCP reservation step by step.

Why Use Sophos Firewall DHCP Reservation?

Instead of manually setting static IP addresses on client devices, DHCP reservation provides a cleaner and more scalable solution.

Key Benefits:

✅ Centralized IP management
✅ No risk of duplicate IP conflicts
✅ Easier troubleshooting
✅ Cleaner network documentation
✅ Better security control

This approach ensures consistency while keeping your network flexible and manageable.

Step 1. Identify the Device for Reservation

Before creating a DHCP reservation, you must identify the target device.

You can obtain this information directly from Sophos Firewall.

Go to:

Log Viewer → DHCP filter

Or navigate to:

Network → DHCP → Lease

Here you will see a list of devices that have already received an IP address from the DHCP server.

From this list, collect:

• MAC Address

• Currently assigned IP address

Example:

Mac: 50:1a:c5:10:c9:84

Make sure you copy the MAC address correctly. Even a small typo will cause the reservation to fail.

This is a critical step in configuring Sophos Firewall DHCP properly.

Step 2. Create a DHCP Reservation

Once you have the MAC address, proceed to create the reservation.

Navigate to:

Network → DHCP → Select DHCP Server

Then:

Open the Static Mappings tab
Click Add

Now fill in the required information:

o MAC Address

Enter the device’s MAC address.
Example: 00:11:22:33:44:55

o IP Address

Enter the IP address you want to reserve.

This IP address can be:

• Within the DHCP range

• Outside the DHCP range but within the same subnet

Make sure the IP is not already assigned to another device.

o Name

Choose a descriptive name for easier management.
Examples:

Server01
Printer
Camera-Lobby

Using meaningful names improves visibility and long-term administration.

After entering all required fields:

• Click Save

At this point, the Sophos Firewall DHCP reservation is successfully configured.

Step 3. Verify the DHCP Reservation

Configuration is not complete without verification.

On the client device:

If using Windows:

Run:

ipconfig /release
ipconfig /renew

Or simply disconnect and reconnect the network (WiFi or LAN).

The device should now receive the exact IP address you reserved.

If the IP address matches your configured value, the reservation is working correctly.

Verification ensures your Sophos Firewall DHCP setup is functioning as expected.

Best Practices for Sophos Firewall DHCP Management

To maintain a professional and clean network environment, follow these best practices:

✅ Keep IP documentation updated

Maintain a spreadsheet or internal documentation.

✅ Avoid mixing manual static IP and DHCP reservation randomly

Standardize your IP allocation strategy.

✅ Use clear naming conventions

Example: SRV-File01, PRN-Office01.

✅ Monitor DHCP lease table regularly

Remove unused or obsolete mappings.

✅ Plan IP address structure properly

Separate servers, users, IoT devices into different ranges.

Good planning improves scalability and reduces future maintenance issues.

Common Mistakes to Avoid

❌ Entering incorrect MAC address
❌ Assigning an IP outside the subnet
❌ Overlapping reserved IPs
❌ Forgetting to renew client lease
❌ Not documenting reserved addresses

Avoiding these errors ensures smooth Sophos Firewall DHCP operation.

When Should You Use DHCP Reservation?

Use DHCP reservation when:

• You need stable IP for firewall rules

• You are configuring NAT or port forwarding

• Devices require monitoring

• You deploy internal DNS records

• You manage network services

It provides the flexibility of DHCP with the stability of static IP.

Conclusion

In this tutorial, you learned how to configure Sophos Firewall DHCP reservation properly and professionally.

You have successfully:

• Identified the target device

• Collected MAC address information

• Created a DHCP static mapping

• Verified IP assignment

Using Sophos Firewall DHCP reservation ensures:

✔ Consistent IP allocation
✔ Centralized management
✔ Cleaner infrastructure
✔ Easier troubleshooting

This configuration is a fundamental best practice in enterprise and SMB environments.

In the next part, you can extend your Sophos deployment with:

• Advanced firewall rules

• VLAN segmentation

• NAT configuration

• VPN setup

Your Sophos Firewall network is now more structured, controlled, and professional. 🔐🚀