RE: DHCP Appliance based on MAC Authentication

["Conlan Adams" <conlan () midwesteyebanks org>]

I guess the real question is, what are you trying to protect yourself against?

If they assign themselves a static IP they can still get network access.

Another option might be to allow MAC's at the switch, but even then they can impersonate a MAC address pretty easily.

Otherwise what your doing will work, I think I spelled that exact way out earlier, but really its only going to protect 
you from random machines being plugged in by unwitting users getting addresses.  Is that why your doing it?

Conlan

-----Original Message-----
From: Jhon [mailto:imranfbhatti () gmail com] 
Sent: Monday, December 19, 2005 11:33 PM
To: security-basics () securityfocus com
Subject: Re: DHCP Appliance based on MAC Authentication

Hi all

Thanks every one who participated and also reads all the posts.

I decided to use MS DHCP by using below method

First we define the IP Range in the address pool in the MS DHCP and then
just exclude the entire defined range in that pool. Then we will assign IP
addresses by reservations  based on MAC addresses.

So by doing this only MAC addresses with sttic mappings can get IP
addresses.

I would like to have comments on this method by the list
Thanks again for reading the posts