What would be easier is a mechanism to let you know "Hey, new MAC address on the network" for which there are numerous tools for that. David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 From: Joe Heaton [mailto:[email protected]] Sent: Tuesday, January 27, 2009 10:30 AM To: NT System Admin Issues Subject: RE: Managing DHCP
That's what I thought...more work than is justifiable, and it pretty much negates the purpose of DHCP... Thanks Matt. Joe Heaton Employment Training Panel From: Matthew Bullock [mailto:[email protected]] Sent: Tuesday, January 27, 2009 9:53 AM To: NT System Admin Issues Subject: RE: Managing DHCP A lot of managed switches allow you to limit which MAC addresses are allowed on the network. That would be the most secure way. For DHCP, you could create reservations for all the devices on your network, and for IP's not used, enter a dummy MAC as a placeholder. Someone would be able to get around this by manually entering an IP address though. mb From: Joe Heaton [mailto:[email protected]] Sent: Tuesday, January 27, 2009 9:44 AM To: NT System Admin Issues Subject: Managing DHCP Is there any way to have DHCP only give out addresses to known devices? Last week we had a mysterious network/workgroup appear in Network Places. My thought is that someone brought in a personal laptop and connected it to the network in order to get internet access. Is there anyway to not allow this? Joe Heaton AISA Employment Training Panel 1100 J Street, 4th Floor Sacramento, CA 95814 (916) 327-5276 [email protected] ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
