Restrict DHCP on Server 2003

  • Thread starter Thread starter John
  • Start date Start date
J

John

Guest
I have a Windows 2003 DHCP running configured to assigned IP addresses based
on MAC addresses... (ie I have serveral traveling laptops that travel to 3
different sites that need an static IP at each location). How do I configure
my DHCP server to only lease IP addresses to the computers I have setup? (ie
only the laptops I have entered in the MAC address in the DHCP server will
get an IP address to keep people from coming in an plugging in their laptop
to gain an IP address)

TIA

John
 
RE: Restrict DHCP on Server 2003

Hi John,

There are a few ways to restrict dhcp. I'll try to write them here:
1. Create a dhcp scope with only reserved IP addresses for domain computers.
But this will not stop people that manually configure their ip addresses on
computers to access your network and is usually not practical if you have
many computers.
2. Switches that can manage port access by mac address filtering. The
drawback of this approach is that mac addreses can be spoofed.
3. 802.1x authentication for wired clients. 802.1X for wired networks
provides authentication and authorization protection at the switch port.
Port-based network access control uses the physical characteristics of a
switched LAN infrastructure to authenticate devices attached to a LAN port.
Use of the port is denied if the authentication process fails. Alternately,
the port can be assigned to a VLAN that does not contain important resources.
For this you must have switches that support 802.1x authentication and
certificate services deployed on Windows 2003. This is the help:
http://www.microsoft.com/downloads/...71-6b20-4cef-9939-47c397ffd3dd&displaylang=en

Have a nice day!

"John" wrote:

> I have a Windows 2003 DHCP running configured to assigned IP addresses based
> on MAC addresses... (ie I have serveral traveling laptops that travel to 3
> different sites that need an static IP at each location). How do I configure
> my DHCP server to only lease IP addresses to the computers I have setup? (ie
> only the laptops I have entered in the MAC address in the DHCP server will
> get an IP address to keep people from coming in an plugging in their laptop
> to gain an IP address)
>
> TIA
>
> John
 
Back
Top