DHCP IP or MAC block

Hi,
once activated a DHCP server is there a way to prevent a system to receive
an IP address? I know you can use a network class ID but I was thinking
using the MAC for example. My server software is 2003.

Thanks

Augie <> wrote:
> Hi,
> once activated a DHCP server is there a way to prevent a system to
> receive an IP address? I know you can use a network class ID but I
> was thinking using the MAC for example. My server software is 2003.
>
> Thanks

You'd have to create a reservation for every *allowed* address. Then make
sure no address exists without a reservation.
This is a huge administrative pain, and gives you no security. Spoofing a
MAC address is trivial.

The way you'd do this to prevent unauthorized nodes on your LAN is to use
fancy expensive network switches. I have no experience with those.

One simple thing is to not leave any unused wall jacks "hot". Unplug them
at the patch panel in the wiring closet (or equivalent).

If the users unplug thier company PC to plug in thier own or sneek a small
hub or switch into the building,...then that is a human problem, not a
tectnical one. Public User Beatings work for that, they're my favorite.

--
Phillip Windell

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------


"Augie" <> wrote in message
news:...
> Hi,
> once activated a DHCP server is there a way to prevent a system to receive
> an IP address? I know you can use a network class ID but I was thinking
> using the MAC for example. My server software is 2003.
>
> Thanks
>