[prev in list] [next in list] [prev in thread] [next in thread] 

List:       dhcp-users
Subject:    Re: Access Control
From:       donovan jeffrey j <donovan () beth ! k12 ! pa ! us>
Date:       2009-11-18 16:05:19
Message-ID: CE001599-0065-4383-840A-EB426706AAB0 () beth ! k12 ! pa ! us
[Download RAW message or body]


On Nov 18, 2009, at 10:00 AM, Simon Hobson wrote:

> donovan jeffrey j wrote:
>
>> how do I setup access control in dhcpd? I have a MAC address that I  
>> want to deny lease to. I'm not sure how to specify the deny  
>> statement.
>> ...
>> somewhere in here I need to Deny lease to 00:00:00:12:34:5f
>
> host bad-host-1 {
>  harware ethernet 00:00:00:12:34:5f ;
>  deny booting ;
> }
>
> If you have a few, then you can put them in a group like this :
>
> group {
>  deny booting ;
>  host bad-host-1 { harware ethernet 00:00:00:12:34:5f ; }
>  host ...
>  host ...
> }
>
> 'deny' will result in log messages, if you want it to be silent,  
> then use 'ignore' instead.
>
>
> But don't forget, this is NOT security - someone can easily  
> configure a client by other means.
>
> -- 
> Simon Hobson

Thanks to all that replied.
Simon you win the speedy click send button award.
-j


_______________________________________________
dhcp-users mailing list
dhcp-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/dhcp-users
[prev in list] [next in list] [prev in thread] [next in thread]