> I need some help with setting up dhcpd. I have been able to get a pxe > workstation up on my home network, but here at work I need to use a > server other than the main dhcp server since it is running rh5.2 & > cannot be upgraded. What I would like to do is have the main dhcp box > reject requests from the workstations based on their hardware > addresses, and have the ltsp dhcp server ignore all requests except > from the workstations. The only problem is that I dont know how to > configure it > > The ltsp sever is running dhcpdv3 and the main server looks like > needing an upgrade to the same.
How old is this dhcpd server exactly? I don't think ltsp needs anything beyond v2, if that. I use it with stock Debian woody--which uses v2-- without problems. As long as the dhcp supports passing the tftp pathname, you're fine. Anyway, you have a few options: 1. subnetting and firewalling. 2. "picky" servers, which reject some macs. 3. "picky" clients, which reject dhcp responses lacking a VCI. 1. put the clients on a subnet and have the ltsp server acting as bridge. Now block all dhcp traffic (port #s? I forget) across the server (but not all traffic altogether! The server itself still needs to get dhcp responses from outside, and the clients from the server). This one is trickiest to set up. I think K12ltsp does this... 2. I never thought about how to do this one, but it shouldn't be too hard. Check the man pages. (Not very helpful of me, I know, sorry). 3. Get a rom-o-matic image for the clients which uses REQUIRE_VCI_ETHERBOOT and then, for the macs in question, use 'option vendor-encapsulated-options 3c:09:45:74:68:65:72:62:6f:6f:74:ff;' on the dhcp server (v2. v3 may be different). See http://www.etherboot.org/doc/html/userman-4.html#ss4.3 and http://www.geocrawler.com/archives/3/5299/2001/7/100/6129709/ for details. Here, if the clients get a dhcp offer which does not have the VCI (vendor class identifier), it is ignored. If you're using a later version of etherboot (5.0.7+), you don't even need this: if the dhcp offer has no filename or an empty server field, the offer is ignored. Use VCI if you want a more robust implementation. Three is easiest. -- Francis Avila ------------------------------------------------------- This sf.net email is sponsored by: Dice - The leading online job board for high-tech professionals. Search and apply for tech jobs today! http://seeker.dice.com/seeker.epl?rel_code=31 _____________________________________________________________________ Ltsp-discuss mailing list. To un-subscribe, or change prefs, goto: https://lists.sourceforge.net/lists/listinfo/ltsp-discuss For additional LTSP help, try #ltsp channel on irc.openprojects.net
