DHCP authentication

[Guest Newbie]

Is there any way to setup some form of authentication so only computers

belonging to the domain can obtain a valid IP address through DHCP server?

 

Any ideas would be greatly appreciated.

[Guest Anthony [MVP]]

Re: DHCP authentication

 

Not directly. You have to get an address before anyone can find out whether

you belong to the domain or not.

You can make it so the switch port will not work unless you have

authenticated, but that's not DHCP

Anthony,

http://www.airdesk.com

 

 

"Newbie" <nomail@noserver.com> wrote in message

news:el4Qx5zcIHA.6024@TK2MSFTNGP06.phx.gbl...

> Is there any way to setup some form of authentication so only computers

> belonging to the domain can obtain a valid IP address through DHCP server?

>

> Any ideas would be greatly appreciated.

>

[Guest Marcin]

Re: DHCP authentication

 

Look into NAC/NAP solutions from Cisco or Microsoft - but keep in mind that

restrictions imposed by them can be easily circumvented by anyone with local

Admin privileges...

 

hth

Marcin

[Guest Filipe Matias]

Re: DHCP authentication

 

Newbie wrote:

> Is there any way to setup some form of authentication so only computers

> belonging to the domain can obtain a valid IP address through DHCP server?

>

> Any ideas would be greatly appreciated.

>

>

Well you can try to implement ipsec in the network. That way only

autenticated machines can comunicate but i belive it wont stop DHCP

server from giving the IP.

This will prevent any one who plugs a computer from reaching your

servers but nothing else. And it generates bigger overheads ins tcp packets