Hi Markolf,

Thanks for the explanation. Need your comment to my statement in the below line of words

Markolf Gudjons <[EMAIL PROTECTED]> wrote:
Fitra,

On Tue, 3 Jan 2006, fitra budi anggoro wrote:

> I like to filter that only Sun Ray DTUs will have IP Addresses from DHCP
> server (Sunray Server) since I am using the same network with PCs. I
> dont want my pc can connect to Sun Ray Server using DHCP Client.
This means your PCs will need to have a manual address configured. They
will still be able to talk to your Ray server, they just will not receive
a DHCP address from it. Is this really what you want?
**********************************
Actually I already set my PC with manual address. But I dont want someone just bring their PC/Laptop and easily connect! to the network just by activate their DHCP client. Thus I need to filter wether it is DTU or other devices. I wan only DTU that can connect to the server.
**********************************

> Is it possible to create Mac table (which will be filled in by DTU's
> Mac address only) on DHCP Servers and use it as filtering table before
> DHCP server assign an ip for a DTU (or PC)?
You can create manual leases in the DHCP server config. See
dhcp_network(4). You would have to create a lease per DTU, which can get
tedious, depending on how many that you have. Make sure you configure only
manual leases in your config, so any machine that does not have a manual
lease set up will not receive an answer from the server.
************************************
I will have to read it first. Any short document how you do that?
************************************

With at least the ISC dhcpd (and maybe with the Sun one also)! , it is
possible to group clients into classes based on specific conditional
statements. A good way to do this is to use the dhcp-client-identifier.
This class can be used in a group assignment in the dhcpd.conf file, which
then has a subnet range of dynamic leases set up. See dhcpd.conf(5).

The good thing about this solution is that you can keep adding DTUs
without having to register their MAC addresses in the DHCP config.
********************
it means that it is possible to register DTU's Mac address in DHCP config and get as what I want?
********************

If at all possible I would separate the Rays from the PCs in the network.
The last thing I would want to worry about is yet another interface on my
servers to be secured against the barrage of threats coming from
Wintels. Just my $0.02...
*****************
Yes.. it is the best infrastructure to create separate networks between Rays and PCs, but it is costly :! -). I already create different subnet between clients and servers networks. Hope it's working :)
*****************

- Markolf
--
Markolf Gudjons EDD/XT/EP Mst. Test Environment Engineer
Ericsson Eurolab Germany email: [EMAIL PROTECTED]
D-52134 Herzogenrath, Ericsson Allee 1 phone: +49 2407 575-665 fax: -7537
*****************
Thanks Markoff
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users


Yahoo! DSL Something to write home about. Just $16.99/mo. or less
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users

Reply via email to