Another interesting thing might be one step removed: How to restrict DHCP replies to only one CLASS of MAC addresses, 8:0:20:x:y:z for instance. (Okay, so maybe a discussion of restricting to Sun MAC's on a W2K server is odd, but it's the first MAC range that came to mind!) This would at least keep people without the same brand of NIC off your DHCP range. Of course, someone can always choose an IP out of his a**, er, hat after he sniffs the wire to find what network(s) are live on the wire...
Steve Vawter UNIX SYSTEM ADMINISTRATOR Zone Labs, Inc. 1060 Howard Street San Francisco CA 94103 ph 415-341-8323 fax 415-341-8299 cell 510-409-9184 pager 877-933-0549 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Wednesday, May 15, 2002 7:04 AM To: [EMAIL PROTECTED] Subject: Restricting DHCP addresses to known MAC's via Win2K DHCP server There's been periodic discussion on this list about restricting DHCP leases by MAC address and the relative merits of doing so. My question is once the decision is made to do it, how is it being done? Does anyone know how to do it in a Win2K server environment? (Win2K DHCP services...) If not possible, is there a typical strategy people are using to restrict granting of DHCP addresses to known MAC's?