We use DHCPatriot (http://www.network1.net/products/dhcpatriot/). This system can integrate with RADIUS and can (sort of) enforce lease limits.
The lease limiting works like this. Host 1 gets an IP. Host 2 comes in and gets an IP. Because host 2 is the most recent host, the system will not renew the Host 1 lease and Host 1 expires and is now assigned a private IP that forces the user to a login portal. At this point Host 1 could potentially login again. If this happens, the Host 2 lease would not be renewed and would expire and Host 2 would be assigned a private IP and pushed to the authentication system. What typically happens when we see this, is a customer calls in wondering why they need to keep authenticating. The DHCPatriot system also has a place where we can see users who are using multiple IP addresses. This gives us the opportunity to contact this customers and address the issue proactively. Essentially, the DHCPatriot system is a souped-up captive portal system. We've been running it for quite a few years now and really like it. Charlie -----Original Message----- From: Af [mailto:[email protected]] On Behalf Of Brett A Mansfield Sent: Wednesday, March 11, 2015 7:05 AM To: [email protected] Subject: [AFMUG] DHCP backfeed I’m curious what everyone does to prevent a customer from pulling more than one IP address without using PPPoE, and how do you prevent their router from backfeeding it’s DCHP server onto your network if they plug in the cable to a LAN port instead of the WAN port? Thank you, Brett A Mansfield Silver Lake Internet
