DHCP Deny Certain Clients 1

[korin1974]

Hi,

I have two networks one secure and one not so secure.

How can I prevent secure users plugging their laptops in a getting an IP address from a DHCP server on the "not so secure" network? Both networks are win2k3 running MS DHCP. Is there a way of using class ID's?

I know I can do it with Linux or using class ID's to give fake details like gateway and DNS but i want to stick with MS and want to prevent getting an IP all together.

The 'not so secure' network is fairly relaxed so we are unable to restrict by MAC address.

Thanks

------------------------------------------
Korin
88solutions.co.uk
Microsoft\Cisco\Vmware

 

[lhuegele]

You are going to need separation of your networks. You can't have multiple DHCP servers on the same network segments. DHCP traffic is broadcast traffic, which means all requests for an IP address go out to every device on your network and the first DHCP server to respond will service the request.

This is why you need the separation.

Good luck,

 

[korin1974]

The two networks are physically separated. In a typical office we have the two networks secure and non-secure. We have secure laptops which are only meant to be used on the secure network but what i am try to achieve is if they plug their laptop in to the non-secure network i want to prevent them getting an IP address.

Thanks

------------------------------------------
Korin
88solutions.co.uk
Microsoft\Cisco\Vmware

 

[58sniper]

You'd need to look into either something like

http://www.petri.co.il/filter-mac-address-windows-server-2008-dhcp-server-callout-dll.htm

or Cisco's Clean Access.

Pat Richard
Microsoft Exchange MVP
Contributing author The Complete Reference: Microsoft Exchange Server 2007