Re: [Security Firewall] fixed dhcpd addresses

Bret Wed, 13 Oct 2004 13:03:05 -0700

I do want the range, but I want the ability to specify who gets an IP by their MAC address. Thus restricting any workstations who try to gain access to the network by simply plugging their computer into it. In other words, I want control of who gets an IP from dhcp.

I suppose a sample config might be something like:

subnet 10.0.1.0 netmask 255.255.255.0 {
        option routers 10.0.1.2
        option subnet-mask 255.255.255.0;
        option broadcast-address 10.0.1.255;
        option domain-name "domain.com";
        range 10.0.1.50 10.0.1.60;
        default-lease-time 86400;
        max-lease-time 86400;
}
group {

        host modem1  { hardware ethernet 00:05:89:AD:05:3D;
                          fixed-address 10.0.1.50; }

        host modem2  { hardware ethernet 00:05:89:AD:05:4D;
                          fixed-address 10.0.1.51; }

        host modem3  { hardware ethernet 00:05:89:AD:05:5D;
                          fixed-address 10.0.1.52; }

        host modem4  { hardware ethernet 00:05:89:AD:05:6D;
                          fixed-address 10.0.1.53; }

        host modem5  { hardware ethernet 00:05:89:AD:05:7D;
                          fixed-address 10.0.1.54; }

But would this actually restrict those not mentioned to obtain an IP?

Thanks.

Florin wrote:

Bret <[EMAIL PROTECTED]> writes:

Florin,

I hope it's not asking too much, but if it is - let me know. Would it also
be possible to include IP filtering by mac addresses in dhcp? I need to
restrict the ability to obtain an IP from dhcp, except those I allow to
obtain an IP by their mac address.

Thanks.

example of a configuration file ? In short, you don't want the range part,
right ?

Florin wrote:

Hi everyone,
I have somehow changed the dhcp server configuration. One can now
configure the server for several networks and use fixed IPs. I have also
added a list of ntp server in System->Time.
The packages are available, like usual, at:
http://peoples.mandrakesoft.com/~florin/www/mnf/Community/RPMS/
you can do a rpm -Uvh *.rpm --force to install them. You will not lose
your infos.
Please let me know if you find any problems.
have a nice day,
------------------------------------------------------------------------
____________________________________________________
Want to buy your Pack or Services from MandrakeSoft? Go to
http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com
____________________________________________________

____________________________________________________ Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com ____________________________________________________


------------------------------------------------------------------------

____________________________________________________
Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com
____________________________________________________

Re: [Security Firewall] fixed dhcpd addresses

Reply via email to