Rather than looking at keeping them off the network, think about keeping
them away from your resources. If they can't access any resources, then who
cares if they're on the network...

Plenty of ways to do that. 

Besides; if client PCs are getting static IPs or reservations now, there's
nothing to prevent the unauthorized machines from getting on the network if
they know the subnet... Give themselves a static IP and they're in...

***********************
Charlie Kaiser
[email protected]
Kingman, AZ
***********************  

> -----Original Message-----
> From: Matthew W. Ross [mailto:[email protected]] 
> Sent: Thursday, July 23, 2009 10:59 AM
> To: NT System Admin Issues
> Subject: RE: DHCP and multiple Subnets; Multiple DHCP server 
> or DHCP-Relays?
> 
> This answers my question exactly. Thank you.
> 
> If I did decide to drop reserving each-and-every computer, 
> what other methods (and probably stronger methods) of 
> preventing unauthorized computers from getting on the network?
> 
> We have a lot of older switches which cannot handle 802.1x, 
> which looks like it will do what I want... but does anybody 
> know of a different solution that works with unmanaged switches?
> 
> 
> --Matt Ross
> Ephrata School District


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

Reply via email to