preventing PC from getting IP from DHCP server(s)

  • Thread starter Thread starter Scott Harding - MS MVP
  • Start date Start date
S

Scott Harding - MS MVP

The only MS way to do this is with reservations based on MAC address
otherwise any computer that get into your network will get an address from
DHCP. This is an age old problem ;)
 
What's the best way to prevent a rogue PC from grabbing an IP address off
our DHCP servers, (based on MAC address, which we do have) ?

Thanks in advance.
 
You could configure a new scope just for that mac address with a
reservation, but make the scope configuration incompatible with the rest of
your network. Of course that will not prevent a determined user from
figuring out what correct tcp/ip info to configure on there own. The best
solution is to use switches that can filter by mac address and/or 802.1X
authentication which if used with a radius/IAS server can require
certificate authentication before machine access to a network is allowed.
These switches are becoming very affordable. The one from D-Link below is in
the $400 range. --- Steve

http://www.dlink.com/products/?pid=87
 
Back
Top