option domain-name "example.org"; default-lease-time 600; max-lease-time 7200; log-facility local7; subnet 192.168.1.0 netmask 255.255.255.0 { range 192.168.1.101 192.168.1.200; #要發的 IP 範圍 option domain-name "ksh_fw.nctucs.net"; #domain name option routers 192.168.1.253; #router, 因為在這次架構中,會幫忙內網 routing 的是兩台 fw,所以這個要設成兩台 fw 的內網 carp IP option broadcast-address 192.168.1.255; option domain-name-servers 140.113.17.5, 140.113.1.1; default-lease-time 3600; max-lease-time 21600; } #兩台web拿固定IP host kshweb1 { hardware ethernet 00:0c:29:66:71:d5; #拿固定 IP 機器的 mac-address fixed-address 192.168.1.1; #固定 IP,記得跟上面動態分配的隔開 } host kshweb2 { hardware ethernet 00:0c:29:88:27:ad; fixed-address 192.168.1.2; }