Why can't you just maintain some type of IA database with the relevant
info and use perl or something to pull it out and feed it into the DHCP
server? We use an oracle database with a view that creates all of the
encessary netsh dommands to add the hosts to the individual scopes. We
have a separate config file that builds the server with options and
superscope and then another batch job that just runs a bat file(created
by the sql query) to slam the hosts into the MS DHCP server. BTW, we
have found alot of limitations with the MS API's regarding DHCP so much
so that they barf after 500 hosts (that's an enterprise system).

Jon
On Sun, 2003-06-22 at 06:02, Laura A. Robinson wrote:
> Check out CheckPoint's MetaIP.
> http://www.checkpoint.com/products/manage/metaip_services.html
>
> Advantage: does what you're asking for without requiring you to create
> reservations for every MAC on your network.
> Disadvantage: pricey
>
> Laura
>
> > -----Original Message-----
> > From: Jake Frost [mailto:jakefr0st (at) hotmail (dot) com [email concealed]]
> > Sent: Thursday, June 19, 2003 5:51 PM
> > To: FOCUS-MS (at) SECURITYFOCUS (dot) COM [email concealed]
> > Subject: Filtering DHCP Assignments by MAC Address
> >
> >
> > We have just converted to DHCP and would like to limit the
> > ability of people
> > to plug in to the network without authorization. In Win2K is
> > it possible to
> > limit DHCP assignments by MAC address or some other mechanism
> > to keep rogue
> > machines out? My server admins have been researching this
> > but can't find a
> > method to achieve what we want. Thanks.
> >
> > Jake
> >
> > _________________________________________________________________
> > MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*.
> > http://join.msn.com/?page=features/virus
> >
> >
> > --------------------------------------------------------------
> > ---------------
> > --------------------------------------------------------------
> > ----------------
> >
>
>
> ------------------------------------------------------------------------
-----
> ------------------------------------------------------------------------
------
>
>

------------------------------------------------------------------------
-----
------------------------------------------------------------------------
------

[ reply ]