Your subnet should not contain mask/prefix length but rather prefix/prefix length: 192.168.96.0/22 That is the first interface you make and should have next hop set towards the internet. For your DHCP scope option, it's like on a Cisco router. The scope automatically encompasses your entire subnet and you need to define excluded ranges (dhcp reserved ranges). ... View more