DHCP Seems so insecure as network configuration to me. This discussion brings up another question:
Has anybody done any work on IPv6 for their internal networking? --Matt Ross Ephrata School District ----- Original Message ----- From: David Lum [mailto:[email protected]] To: NT System Admin Issues [mailto:[email protected]] Sent: Tue, 27 Jan 2009 10:39:22 -0800 Subject: RE: Managing DHCP > What would be easier is a mechanism to let you know "Hey, new MAC address on > the network" for which there are numerous tools for that. > David Lum // SYSTEMS ENGINEER > NORTHWEST EVALUATION ASSOCIATION > (Desk) 971.222.1025 // (Cell) 503.267.9764 > From: Joe Heaton [mailto:[email protected]] > Sent: Tuesday, January 27, 2009 10:30 AM > To: NT System Admin Issues > Subject: RE: Managing DHCP > > That's what I thought...more work than is justifiable, and it pretty much > negates the purpose of DHCP... Thanks Matt. > > Joe Heaton > Employment Training Panel > > From: Matthew Bullock [mailto:[email protected]] > Sent: Tuesday, January 27, 2009 9:53 AM > To: NT System Admin Issues > Subject: RE: Managing DHCP > > A lot of managed switches allow you to limit which MAC addresses are allowed > on the network. That would be the most secure way. For DHCP, you could > create reservations for all the devices on your network, and for IP's not > used, enter a dummy MAC as a placeholder. Someone would be able to get > around this by manually entering an IP address though. > > mb > > From: Joe Heaton [mailto:[email protected]] > Sent: Tuesday, January 27, 2009 9:44 AM > To: NT System Admin Issues > Subject: Managing DHCP > > Is there any way to have DHCP only give out addresses to known devices? > Last week we had a mysterious network/workgroup appear in Network Places. > My thought is that someone brought in a personal laptop and connected it to > the network in order to get internet access. Is there anyway to not allow > this? > > Joe Heaton > AISA > Employment Training Panel > 1100 J Street, 4th Floor > Sacramento, CA 95814 > (916) 327-5276 > [email protected] > > > > > > > > > > > > > > > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
