Restrict DHCP on Server 2003

[Guest John]

I have a Windows 2003 DHCP running configured to assigned IP addresses based

on MAC addresses... (ie I have serveral traveling laptops that travel to 3

different sites that need an static IP at each location). How do I configure

my DHCP server to only lease IP addresses to the computers I have setup? (ie

only the laptops I have entered in the MAC address in the DHCP server will

get an IP address to keep people from coming in an plugging in their laptop

to gain an IP address)

 

TIA

 

John

[Guest Masterplan]

RE: Restrict DHCP on Server 2003

 

Hi John,

 

There are a few ways to restrict dhcp. I'll try to write them here:

1. Create a dhcp scope with only reserved IP addresses for domain computers.

But this will not stop people that manually configure their ip addresses on

computers to access your network and is usually not practical if you have

many computers.

2. Switches that can manage port access by mac address filtering. The

drawback of this approach is that mac addreses can be spoofed.

3. 802.1x authentication for wired clients. 802.1X for wired networks

provides authentication and authorization protection at the switch port.

Port-based network access control uses the physical characteristics of a

switched LAN infrastructure to authenticate devices attached to a LAN port.

Use of the port is denied if the authentication process fails. Alternately,

the port can be assigned to a VLAN that does not contain important resources.

For this you must have switches that support 802.1x authentication and

certificate services deployed on Windows 2003. This is the help:

http://www.microsoft.com/downloads/details.aspx?familyid=05951071-6b20-4cef-9939-47c397ffd3dd&displaylang=en

 

Have a nice day!

 

"John" wrote:

> I have a Windows 2003 DHCP running configured to assigned IP addresses based

> on MAC addresses... (ie I have serveral traveling laptops that travel to 3

> different sites that need an static IP at each location). How do I configure

> my DHCP server to only lease IP addresses to the computers I have setup? (ie

> only the laptops I have entered in the MAC address in the DHCP server will

> get an IP address to keep people from coming in an plugging in their laptop

> to gain an IP address)

>

> TIA

>

> John