[SUMMARY] Limiting access to DHCP (via MAC filtering)

From: David Foster <foster_at_dim.ucsd.edu>
Date: Mon Mar 10 2003 - 19:32:39 EST
Platform:  SunOS donor 5.8 Generic_108528-18 sun4u sparc SUNW,Ultra-80

I wanted a way to limit access to our Sun DHCP server using a
list of "blessed" MAC addresses, while still providing a range
of dynamically assigned addresses. This is not currently possible
with Sun's server, but a Sun engineer did tell me that it would
be put on the "wish list" for a future release.

I should have been more explicit in my post...many suggested
assigning IPs statically with the MAC address specified, so each
IP will only be assigned to a particular MAC address. This is fine,
except I really needed to keep the functionality of a dynamically
assigned pool of IPs.

You _can_ do what I want using ISC's DHCP server ( http://www.isc.org ), 
the solution is summarized well here:


Here's what your dhcp.conf file might look like:

	#declarations des hosts : adresses ethernet
	host dell_aa { hardware ethernet 00:04:76:4f:e1:f3;}
	host pc_p_laurence { hardware ethernet 00:08:74:97:af:92; }

	pool {  
		default-lease-time 21600;
		max-lease-time 43200;
		deny unknown clients;
Everyone highly recommended ISC's DHCP server over Sun's. I've been
having problems with IPs becoming "unusable" so I think it's time
for a transition.

Thanks to:

Casper Dik
Dave Miner
William Yodlowsky
Josh Glover
John Adams
Larye D. Parkins
Alexei Kotelnikov
Bryan J. Smith
Marco Greene
Tim Chipman
Francisco Puente
Heiden, John
Steve Sandau
Peter Ondruska
Mike Cunningham
Gerard Henry
Paul Greidanus
Brett Lymn

> Is there a way, using Solaris DHCP (or any version of DHCP for
> that matter), to limit which clients may obtain IP addresses?
> Something similar to MAC address filtering. I've gone through
> the Sun DHCP manual and don't see anything.
> Really like the convenience of DHCP, but we need a way to
> limit access.
> Dave Foster

   David Foster    National Center for Microscopy and Imaging Research
    Programmer/Analyst     University of California, San Diego
    dfoster@ucsd.edu       Department of Neuroscience, Mail 0608
    (858) 534-7968         http://ncmir.ucsd.edu/

   "The reasonable man adapts himself to the world; the unreasonable one
   persists in trying to adapt the world to himself.  Therefore, all progress
   depends on the unreasonable."   -- George Bernard Shaw
sunmanagers mailing list
Received on Mon Mar 10 19:39:24 2003

This archive was generated by hypermail 2.1.8 : Thu Mar 03 2016 - 06:43:04 EST