DHCP Access without permission

Hello Ahmed,

Buy switches that you can manage and only allow MAC addresses on the ports
you know.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I have DHCP server on my network and my problem is there people
> connecting
> to my network
> without my permission. I set my network to use DCHP and there are
> people
> accessing the network through static ip address, which is against the
> rule
> I need to stop this, and only allow those connecting through as dhcp
> client.
>
> Your help is appreciated
>
> Ahmed
>

Hi Ahmed,

Another way is to use 802.1x implementation for wired networks (more secure,
but also more complex to implement)
http://www.microsoft.com/DOWNLOADS/d...displaylang=en

--
Have a nice day!
Masterplan - MCSE,MCITP-EA
http://winmasterplan.blogspot.com


"Ahmed" wrote:

> I have DHCP server on my network and my problem is there people connecting
> to my network
> without my permission. I set my network to use DCHP and there are people
> accessing the network through static ip address, which is against the rule
>
> I need to stop this, and only allow those connecting through as dhcp client.
>
> Your help is appreciated
>
> Ahmed
>
>
>

Hi,

For only 2 computers, you don't need implement 802.1x. Look at what Meinolf
said, because it's more easy to configure.

--
Have a nice day!
Masterplan - MCSE,MCITP-EA
http://winmasterplan.blogspot.com


"Ahmed" wrote:

> Thanks Meinolf,
>
> Let me be more specific, I have a customer with ADSL modem configured as
> DHCP Server, the dhcp is set to allow 2 ip. but the client, without my
> permission, is configuring a third and even fouth computer with istatic ip
> and is able to browse the internet.
>
> i don't know how this is working, but it is confusing me. i want those with
> static not to be able to browse as long as they are using static.
>
>
> Ahmed
>
>
>
>
> "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
> news:(E-Mail Removed) .com...
> > Hello Ahmed,
> >
> > Buy switches that you can manage and only allow MAC addresses on the ports
> > you know.
> >
> > Best regards
> >
> > Meinolf Weber
> > Disclaimer: This posting is provided "AS IS" with no warranties, and
> > confers no rights.
> > ** Please do NOT email, only reply to Newsgroups
> > ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> >
> >> I have DHCP server on my network and my problem is there people
> >> connecting
> >> to my network
> >> without my permission. I set my network to use DCHP and there are
> >> people
> >> accessing the network through static ip address, which is against the
> >> rule
> >> I need to stop this, and only allow those connecting through as dhcp
> >> client.
> >>
> >> Your help is appreciated
> >>
> >> Ahmed
> >>
> >
> >
>
>
>

Hello Ahmed,

If you know the ip range that is used and you configure a static ip address,
this will not have any influence with the DHCP server. It will not realize
that. And the client can use the network because, it is in the correct range.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Thanks Meinolf,
>
> Let me be more specific, I have a customer with ADSL modem configured
> as DHCP Server, the dhcp is set to allow 2 ip. but the client, without
> my permission, is configuring a third and even fouth computer with
> istatic ip and is able to browse the internet.
>
> i don't know how this is working, but it is confusing me. i want those
> with static not to be able to browse as long as they are using static.
>
> Ahmed
>
> "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
> news:(E-Mail Removed) .com...
>
>> Hello Ahmed,
>>
>> Buy switches that you can manage and only allow MAC addresses on the
>> ports you know.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> I have DHCP server on my network and my problem is there people
>>> connecting
>>> to my network
>>> without my permission. I set my network to use DCHP and there are
>>> people
>>> accessing the network through static ip address, which is against
>>> the
>>> rule
>>> I need to stop this, and only allow those connecting through as dhcp
>>> client.
>>> Your help is appreciated
>>>
>>> Ahmed
>>>

Ahmed <(E-Mail Removed)> wrote:
> Meinolf,
>
> Yes, that is right it shouldn't have any influency on the DHCP
> Server, am sure it is misconfiguration from my side (either from the
> device, or wrong dhcp setting), but it is affecting the dhcp server.
>
> I will just go back reconfiguring more thoroughly, and will let you
> know my result
>
> Ahmed

I don't think you understood what he was saying. What Meinolf means is: this
is how DHCP works. And you can't stop people from doing this, with DHCP or
static IPs they set themselves, not with your existing setup.

You will need to get a fancier switch that supports authentication if you
want to stop this. However, it is really a company policy issue more than a
technical one. You say this is "against the rule" - make sure you report
people who violate it.

I have DHCP server on my network and my problem is there people connecting
to my network
without my permission. I set my network to use DCHP and there are people
accessing the network through static ip address, which is against the rule

I need to stop this, and only allow those connecting through as dhcp client.

Your help is appreciated

Ahmed

Thanks Meinolf,

Let me be more specific, I have a customer with ADSL modem configured as
DHCP Server, the dhcp is set to allow 2 ip. but the client, without my
permission, is configuring a third and even fouth computer with istatic ip
and is able to browse the internet.

i don't know how this is working, but it is confusing me. i want those with
static not to be able to browse as long as they are using static.


Ahmed




"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
news:(E-Mail Removed) .com...
> Hello Ahmed,
>
> Buy switches that you can manage and only allow MAC addresses on the ports
> you know.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> I have DHCP server on my network and my problem is there people
>> connecting
>> to my network
>> without my permission. I set my network to use DCHP and there are
>> people
>> accessing the network through static ip address, which is against the
>> rule
>> I need to stop this, and only allow those connecting through as dhcp
>> client.
>>
>> Your help is appreciated
>>
>> Ahmed
>>
>
>

Meinolf,

Yes, that is right it shouldn't have any influency on the DHCP Server, am
sure it is misconfiguration from my side (either from the device, or wrong
dhcp setting), but it is affecting the dhcp server.

I will just go back reconfiguring more thoroughly, and will let you know my
result

Ahmed


"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
news:(E-Mail Removed) .com...
> Hello Ahmed,
>
> If you know the ip range that is used and you configure a static ip
> address, this will not have any influence with the DHCP server. It will
> not realize that. And the client can use the network because, it is in the
> correct range.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Thanks Meinolf,
>>
>> Let me be more specific, I have a customer with ADSL modem configured
>> as DHCP Server, the dhcp is set to allow 2 ip. but the client, without
>> my permission, is configuring a third and even fouth computer with
>> istatic ip and is able to browse the internet.
>>
>> i don't know how this is working, but it is confusing me. i want those
>> with static not to be able to browse as long as they are using static.
>>
>> Ahmed
>>
>> "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
>> news:(E-Mail Removed) .com...
>>
>>> Hello Ahmed,
>>>
>>> Buy switches that you can manage and only allow MAC addresses on the
>>> ports you know.
>>>
>>> Best regards
>>>
>>> Meinolf Weber
>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>> confers no rights.
>>> ** Please do NOT email, only reply to Newsgroups
>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>> I have DHCP server on my network and my problem is there people
>>>> connecting
>>>> to my network
>>>> without my permission. I set my network to use DCHP and there are
>>>> people
>>>> accessing the network through static ip address, which is against
>>>> the
>>>> rule
>>>> I need to stop this, and only allow those connecting through as dhcp
>>>> client.
>>>> Your help is appreciated
>>>>
>>>> Ahmed
>>>>
>
>

On Jan 29, 12:25*am, "Ahmed" <ahmedi...@globalsom.com> wrote:
> Thanks Meinolf,
>
> Let me be more specific, *I have a customer with ADSL modem configured as
> DHCP Server, the dhcp is set to allow 2 ip. but the client, without my
> permission, *is configuring a third and even fouth computer with istatic ip
> and is able to browse the internet.
>
> i don't know how this is working, but it is confusing me. i want those with
> static not to be able to browse as long as they are using static.
>
> Ahmed
>
> "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in messagenews:(E-Mail Removed) crosoft.com...
>
> > Hello Ahmed,
>
> > Buy switches that you can manage and only allow MAC addresses on the ports
> > you know.
>
> > Best regards
>
> > Meinolf Weber
> > Disclaimer: This posting is provided "AS IS" with no warranties, and
> > confers no rights.
> > ** Please do NOT email, only reply to Newsgroups
> > ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>
> >> I have DHCP server on my network and my problem is *there people
> >> connecting
> >> to my network
> >> without my permission. I set my network to use DCHP and there are
> >> people
> >> accessing the network through static ip address, which is against the
> >> rule
> >> I need to stop this, and only allow those connecting through as dhcp
> >> client.
>
> >> Your help is appreciated
>
> >> Ahmed

If you are using a plain domestic ADSL Modem / router then nearly all
of them will allow you to restrict connections based on the MAC
address as Meinolf suggests.
I think you need to go through the settings pages of the ADSL modem or
perhaps post the make and model here, and we can tell you where (or if
you can) set up MAC filtering.

Alister

Alister <(E-Mail Removed)> wrote:

<snip>
>
> If you are using a plain domestic ADSL Modem / router then nearly all
> of them will allow you to restrict connections based on the MAC
> address as Meinolf suggests.
> I think you need to go through the settings pages of the ADSL modem or
> perhaps post the make and model here, and we can tell you where (or if
> you can) set up MAC filtering.
>
> Alister

But note that MAC addresses can be spoofed easily. This is not a real way to
secure your network.