Assign Rouge Clients a Different IP Scheme

[PU36]

I'm running Windows 2003 utilizing DHCP for all clients. Every day I see that a non domain computer connects to our VPN (Sonicwall) and obtains an IP address fromour DHCP Server.

How can I prevent this user from getting an IP address OR how can I give this computer an IP address on a different netework and scope that they will be forced to contact up to setermine the issue?

I have tried to create a new scope with a Class C network (We are on an A) and had their mac to the reservation. However the VPN always gives the computer the current network.

Any thoughts would be great.

Thanks

 

[gmail2]

How about you create a reservation like you done, but then block that IP on your firewall? Or maybe you could create a new scope for that one IP (exclude it from your current scope) and then maybe add bogus gateway and DNS settings? I think you might have to create a superscope to do that though. If you don't have too many clients, you could always just create a reservation for everyone and lock it down completely - althought if you've got alot of clients this is alot of administration.

But bear in mind, even if you do this, the user could still statically assign themselves an IP if they have admin rights - and this is assuming it is a user. Maybe it could be a printer or print server that's on DHCP by accident? Have you tried telnetting to it just incase?

Irish Poetry - Karen O'Connor
Get your Irish Poetry Published
Garten und Landschaftsbau

 

[PU36]

I'm pretty sure it is a computer because it is coming through our firewall using a Windows Client. I'll look into creating a new scope and givig it false information.

I'll keep you posted.

 

[gmail2]

Or, if you have a reasonably good switch, you could probably block that mac address on it.

Anyway, best of Luck, whatever method you choose.

Irish Poetry - Karen O'Connor
Get your Irish Poetry Published
Garten und Landschaftsbau