Only other option would be to use managed switches and
again, you would need MACs of all auth. machines as you would need to register
each MAC for them to filter traffic. Unfortunately, other than that, not that
easy. - Marc From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Edwin Sent: February 3, 2006 20:55 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Getting better control over DHCP Assigning IP’s based
off of MAC addresses would be a huge headache! Besides, just as you said
the “network savvy” person can easily find out the IP range if needed and assign
them self an IP and spoof the MAC if needed. If something like this
is possible, I would like to have a more concrete
solution. But thank you very much
for your reply. Edwi From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Marc A.
Mapplebeck I'm not sure if it's
the best way to do it, but you could set your entire scope to be in one
exclusion range, then assign static DHCP to authorised MACs. After that, for
added security, you could set a second scope to give out leases outside your
network range so that unauth ppl will get a lease, but not be able to see
anybody, only downside to that would be that the network savvy user could look
under network settings and see what the IP of the DHCP server is and then assign
a static IP within that range. HTH - Marc From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Edwin Is it possible within a domain on an
authorized DHCP server to restrict what machines get a DHCP IP Address?
For example, I want to prevent someone from bringing in an unauthorized laptop
and getting an IP Address on the network. I want it to be so that if the
machine is not a part of the domain, it does not get any network connectivity
from the DHCP server. Thanks, Edwin
|
- RE: [ActiveDir] Getting bet... Marc A. Mapplebeck
- RE: [ActiveDir] Gettin... Brian Desmond
- RE: [ActiveDir] Gettin... joe
- Re: [ActiveDir] Ge... Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
- RE: [ActiveDir... joe
- RE: [ActiveDir... Dean Wells
- Re: [Activ... Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
- Re: [Activ... Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]