DHCP: Prevent clients from obtaining a lease

[meastaugh1]

Hi,

I have the MAC addresses of a number of clients which I don't want to obtain leases from the DHCP server. Is it possible to specify which MAC addresses not to give address leases to?

thanks

 

[DestinysDream]

So are you wanting to take them off of the network or assign static IP addresses? Log onto their machine as an administrator, right click on "Network Places" go to properties then right click on "Local Area Connection" go to properties and then right click on "TCP/IP" go to properties this will allow you to assign static IP address or disable DHCP. Why are you trying to do this?

If anyone calls and says "I know a little something about computers" just tell them to reformat it.

 

[meastaugh1]

Oops sorry, just to clarify, as my original message isn't clear enough:

I know that a number of unauthorised laptops are being connected to the network and I want to prevent them from being able to obtain an IP lease from the DHCP server. Is there any way of excluding certain clients from being able to obtain an IP address, by specifying their MAC address?

thanks

 

[Titleist]

meastaugh1,

What I do is create a reservation for them with 127.0.0.1 for the DNS, WINS and the gateway, they still will get an IP address but really can't browse anywhere with it....

john

 

[meastaugh1]

Ahh thanks John, will give it a try.

 

[Claudek]

What Titleist said has merit. The only thing is that you would be messing with the configuration of an exiting scope which is messy.
What you could do is create a fake dhcp range, say 192.168.2.x and assign the 127.0.0.1 for dns,gateway etc there for that scope. Now set the reservations and you're set.


Claudius (What certifications??)

http://www.iteq.com.au

 

[meastaugh1]

Claudek,

Thanks. Excuse my ignorance, but can you only have one active scope? Would the 192.168.0.x range not need to be active? Would the reservations on the 192.168.0.x still work if the scope isn't active?

cheers

 

[Claudek]

Sorry, read my post again and it isn't as cler as it I thought. Say for eg your current DHCP scope is 192.168.1.0
You can add another scope 192.168.111.0. If you have only 5 clients for eg you wish to reserve IPs for, you only choose an address range of 5 IP addresses, eg 192.168.111.1-192.168.111.5 during setup. Also during setup you can specify the gateway, dns etc as being 127.0.0.1. You can have more than 1 scope activated on DHCP. As the 5 addresses are now allocated, to add more clients reservations just increase the IP pool as required.

While above suggestion should work, should any of those users decide to try using legitimate IP addresses by manually putting it into the TCP/IP protperties with your companies gateway, dns details, they will still have access to your network and the web etc.




Claudius (What certifications??)

http://www.iteq.com.au