Guest Newbie Posted February 19, 2008 Posted February 19, 2008 Is there any way to setup some form of authentication so only computers belonging to the domain can obtain a valid IP address through DHCP server? Any ideas would be greatly appreciated.
Guest Anthony [MVP] Posted February 19, 2008 Posted February 19, 2008 Re: DHCP authentication Not directly. You have to get an address before anyone can find out whether you belong to the domain or not. You can make it so the switch port will not work unless you have authenticated, but that's not DHCP Anthony, http://www.airdesk.com "Newbie" <nomail@noserver.com> wrote in message news:el4Qx5zcIHA.6024@TK2MSFTNGP06.phx.gbl... > Is there any way to setup some form of authentication so only computers > belonging to the domain can obtain a valid IP address through DHCP server? > > Any ideas would be greatly appreciated. >
Guest Marcin Posted February 19, 2008 Posted February 19, 2008 Re: DHCP authentication Look into NAC/NAP solutions from Cisco or Microsoft - but keep in mind that restrictions imposed by them can be easily circumvented by anyone with local Admin privileges... hth Marcin
Guest Filipe Matias Posted February 21, 2008 Posted February 21, 2008 Re: DHCP authentication Newbie wrote: > Is there any way to setup some form of authentication so only computers > belonging to the domain can obtain a valid IP address through DHCP server? > > Any ideas would be greatly appreciated. > > Well you can try to implement ipsec in the network. That way only autenticated machines can comunicate but i belive it wont stop DHCP server from giving the IP. This will prevent any one who plugs a computer from reaching your servers but nothing else. And it generates bigger overheads ins tcp packets
Recommended Posts