Hey Andrew, What kind of switches are you using? Lots of new switches have features to block rogue DHCP servers, require DHCP address acquisition before it will forward traffic, etc.
We're a cisco 2960 shop here for our res-halls. If you are on a similar switch I'd be happy to share our configuration that prevents this. -Josh On 08/25/2010 10:11 AM, Andrew Niemantsverdriet wrote: > I am using PacketFence in a university environment, it is used for our > residence halls in VLAN mode. Some of our users thinking that they > will get around having to register their computer decided that all > they would have to do is enter a static IP. They chose 192.168.96.1 > which is the address of the registration VLAN, this caused the entire > system to come crashing down. Nobody was able register, the DHCP > server quickly ran out of IP address space and other problems > happened. As Monday was the first day of school not many people had > registered yet, so it caused headaches for everybody. My question is > how can we prevent that from happening in the future, is there anyway? > What about users assigning static IP address after they have > registered, can we prevent that? > > Thanks, > ------------------------------------------------------------------------------ Sell apps to millions through the Intel(R) Atom(Tm) Developer Program Be part of this innovative community and reach millions of netbook users worldwide. Take advantage of special opportunities to increase revenue and speed time-to-market. Join now, and jumpstart your future. http://p.sf.net/sfu/intel-atom-d2d _______________________________________________ Packetfence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
