DHCP only to authorized computers

[bhphoto]

We have a DHCP, I want to restrict that only authorized users should be able to print to a network printer,

What happens it that there might be someone comes in with his laptop and gets connected to our network and sets up a printer on his computer by knowing the Printers ip and he can print with no problem, how can I restrict this?

 

[bhphoto]

sorry forgot my name:

Joel

 

[bhphoto]

sorry forgot to post my name:

Joel

 

[skotman]

You can't get the Mac address of every computer that is allowed to connect and set up a reservation for each one, you will also have to set the scope to have the same number of IP addresses as computers. I'm sure there is an easier way but I'm not sure of it.


Scott Heath

http://www.scottspad.com

AIM: orange7288

 

[bhphoto]

Would you say that a managed switch can {be the only} help?

 

[skotman]

Yes, now that I think about it I know that 2 of the Hiltons here in New Orleans use managed switches like that. The only issue I can see with that is, you have to turn the port off untill an authorized user asks you to turn it on. Otherwise if you leave it on all the time anyone can get a DHCP address.

Scott Heath

http://www.scottspad.com

AIM: orange7288

 

[bhphoto]

How about this, is there any way to make that to have access to the DNS {or to specific ip address} only by authenticating?

{Please forgive me if I don’t know what I am talking about.}

JoelB

 

[skotman]

OK I have an idea, I'm not to familier with this so bear with me. Try using PPPoE (PPP over Ethernet) This is what the larger DSL providers use. The company I worked for used it in the city's largest office building and we had a few glitches with it but once we got it working it worked like a charm. Please, anyone else chime in here about PPPoE as this is kind of over my head.

Another option similar to PPPoE is establishing a VPN between your router and the user. This way the user has to auth. before he gets to the net.

Scott Heath

http://www.scottspad.com

AIM: orange7288

 

[bhphoto]

I am not familiar with managed switches but maybe someone can answer me, is there a possibility to setup at the switch to restrict access to a device and the only way to access is by authenticating with the network domain {or something like that…}?

Thanks
JoelB