Send dhcp-users mailing list submissions to
        dhcp-users@lists.isc.org

To subscribe or unsubscribe via the World Wide Web, visit
        https://lists.isc.org/mailman/listinfo/dhcp-users
or, via email, send a message with subject or body 'help' to
        dhcp-users-requ...@lists.isc.org

You can reach the person managing the list at
        dhcp-users-ow...@lists.isc.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of dhcp-users digest..."


Today's Topics:

   1. Re: How to deny classless clients instead of unknown-clients.
      (Simon Hobson)


----------------------------------------------------------------------

Message: 1
Date: Wed, 19 Feb 2020 21:35:04 +0000
From: Simon Hobson <dh...@thehobsons.co.uk>
To: Users of ISC DHCP <dhcp-users@lists.isc.org>
Subject: Re: How to deny classless clients instead of unknown-clients.
Message-ID: <6e535e91-618f-4362-98ca-2e89f6d48...@thehobsons.co.uk>
Content-Type: text/plain; charset=us-ascii

Marcio Merlone <marcio.merl...@a1.ind.br> wrote:

>> The first thing to say is DO NOT MIX ALLOW AND DENY in one pool. It can be 
>> done, but the way it is processed is non-intuitive (and TBH I can't remember 
>> how it works) so is best avoided.
>> 
> Tks for the tip. But I usually have to add an explicit deny clause to avoid 
> unwanted clients by experience.

I've never had to do this.


>> So :
>> pool {
>>    allow members of "clsFoo";
>>    range 192.168.0.30 192.168.0.200;
>> }
>> should be sufficient. Members of clsFoo will be allowed, anything else will 
>> be denied.
>> 
> I commented out all deny lines, keeping just allow for all pools. Yet, an 
> unknown-client just got an IP from the clsFoo pool.
> 
> I cannot invert this logic, none of my clients are "known", but classy. 
> Shouldn't a subclass definition make that a known host? Itching to open a 
> feature request.

You need to post both your full config file (obfuscate any public IPs if you 
need to) and log entries when it's "not working properly". What you are seeing 
is not correct operation.

Simon



------------------------------

Subject: Digest Footer

_______________________________________________
dhcp-users mailing list
dhcp-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/dhcp-users


------------------------------

End of dhcp-users Digest, Vol 136, Issue 9
******************************************

Reply via email to