Re: DHCP MAC Address Authentication

From: Richard G. Harper (rgharper_at_email.com)
Date: 08/23/04


Date: Mon, 23 Aug 2004 05:05:09 -0400

You need something besides DHCP to get the kind of security you want.
Windows 2000 DHCP does not have the ability to deny access, only to grant
it. Check the network devices (routers, switches) on your network to see if
they can be configured to only allow access to known MAC addresses.

-- 
Richard G. Harper [MVP Win9x]  rgharper@email.com
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all.  Private mail is usually not replied to.
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm
"Tuerkay Caglayan" <TuerkayCaglayan@discussions.microsoft.com> wrote in 
message news:EBB98737-6998-4CC1-B9BD-5C4BDFDF442C@microsoft.com...
> Hello,
>
> I want that only known clients can access our network!
> Other clients should have no chance to access our network! I have
> read that I could realise it with DHCP reservation!
>
> To do this reservation is no problem but is it make sense? I think by 
> entering
> the ip address, subnetmask manually the client have also an entrance!
> But I is an better security level than no dhcp reservation?
>
> Thanks for your reply in advance! 


Relevant Pages

  • RE: Down with DHCP!!!!
    ... Managing/monitoring the DHCP pools as assignments yourself ... -Other management tools as in Asset ... Security Administrator ... Network Operations-ICW Group ...
    (Security-Basics)
  • Re: Secure your DHCP
    ... I can only think of allocating via dhcp reservation using network card ... Create an exclusion of your whole DHCP scope (So no IP's are free to be ... assign each mac address an Ip address from what was in your pool. ...
    (microsoft.public.windows.server.sbs)
  • Re: networking private and public hosts questions
    ... some systmes in storage to create a test network. ... a WS to the child and attempted to pull an IP from the DHCP server, ...
    (microsoft.public.win2000.networking)
  • Re: A little FYI
    ... > fix for a different problem or end up making the same configuration ... Maybe faulty network equipment, ... > to look at what might interfere with DHCP. ... you were not here as I was trying to get the card to stay ...
    (comp.security.firewalls)
  • Re: Preventing DHCP from allocating IPs
    ... Each segment is physically separate with a Linux ... unknown MAC addresses firstly don't get a DHCP ... >> wants access to your network, they will have to come to you to obtain ...
    (Security-Basics)