Re: DHCP


The best way to go about this would be address filtering right? You
should be able to setup an ACL with your allowed mac addresses
getting
IPs and any others being ignored.


DHCP is not a security system.

It is trivial for any *nix system to extract valid MAC / IP pairs
that are currently in use. Then all you have to do is wait for the
traffic to stop and pretend to be that pair.

I repeat, DHCP is not a security system.

Cheers, Tim.

--
The code that never executes at all is the fastest.


------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

Need to pass the CISSP? InfoSec Institute's CISSP Boot Camp in both Instructor-Led and Online formats is the most concentrated exam prep available. Comprehensive course materials and an expert instructor means you pass the exam. Gain a laser like insight into what is covered on the exam, with zero fluff!

http://www.infosecinstitute.com/courses/cissp_bootcamp_training.html
------------------------------------------------------------------------

Relevant Pages

  • Re: How to make ipfw consider MAC-IP match?
    ... >> I have a table with ethernet (MAC) addresses matching IPs. ... > of thing you need to use 802.1x authentication or maybe even PPPoE. ... means i will need to give up DHCP, because PPP will serve IPs, not DHCP. ...
    (freebsd-stable)
  • Re: win 2000 server Netzwerkdrucker
    ... >Indem Du im DHCP-Server einen Teil des Adressbereichs ... >in der Regel feste IPs haben. ... MAC Adresse, kann ich nicht finden im WWWinterface des ... Muß ich bei eder Nummer reservierung im DHCP ...
    (microsoft.public.de.german.win2000.networking)
  • Re: DHCP und MAC
    ... MAC Reservierte IPs vom DHCP vergeben werden. ...
    (microsoft.public.de.german.windows.server.networking)
  • Re: Configuring router for static IP address on LAN
    ... an award for the worst user interface ever) and I need to understand how the ... DHCP server allocates IP addresses to the various ... unique MAC address assigned to it, which is how the DHCP server keeps ... hardcoded IPs at the 10.0.0.1 to .4 range, ...
    (uk.comp.sys.mac)
  • Re: client authentication
    ... and next about controlling leasing of IPs from DHCP. ... that are then available each only for a specific MAC, ... > How to block a user from accessing the Windows 2000 Server by the MAC ...
    (microsoft.public.win2000.security)