DHCP Client question

I believe what Joe ment was to create User or Vendor Classes...

How to Create a New DHCP User or Vendor Class
http://support.microsoft.com/default...b;en-us;240247

--
Mike
Microsoft MVP - Windows Security

"Neteng" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> What doe you mean by class? Do you mean an RFC1918 address? Where would
> you
> assign the class on a host and still allow them to be served by DHCP?
>
> "ACE-Joe" <(E-Mail Removed)> wrote in message
> news:2547B541-DE01-43FA-A2E9-(E-Mail Removed)...
>> Hi all,
>>
>> In DHCP, in attempt to secure who gets a DHCP address, I was thinking
> of
>> specifying a class in the DHCP server and manually on the clients for the
>> scopes of my network. This way, if a client doesn't have the class
> specified
>> in their IP settings, they won't get an address from my DHCP server. My
>> question is this. If a client is a mobile user with a laptop, and we
> specify
>> the class in their IP settings. If they take their machine to another
>> network, that also uses DHCP, will specifying a class on the client side
>> prevent them from getting an IP? I don't want to cause trouble for
> traveling
>> users going to hotels or other offices that use DHCP and not be able to
> get
>> an IP due to me specifying a class in their settings. Is this a valid
>> concern or will other DHCP servers still be able to give our machines an
>> address even though we specify a class?
>>
>> thanks
>> Joe
>
>

Hi Joe,

Yes, clients will be able to work from other networks without any problems.

E.g. in my office we are using classes (for different reason that you plan
to) but we use them and we get specific IPs depending on user's class on
DHCP.
I also have DHCP server at home where I don't use DHCP classes and I can
still connect without any problem (and I do get totally different set of IP
address then I get in the office).

I hope this helps,

--
Mike
Microsoft MVP - Windows Security

"ACE-Joe" <(E-Mail Removed)> wrote in message
news:2547B541-DE01-43FA-A2E9-(E-Mail Removed)...
> Hi all,
>
> In DHCP, in attempt to secure who gets a DHCP address, I was thinking
> of
> specifying a class in the DHCP server and manually on the clients for the
> scopes of my network. This way, if a client doesn't have the class
> specified
> in their IP settings, they won't get an address from my DHCP server. My
> question is this. If a client is a mobile user with a laptop, and we
> specify
> the class in their IP settings. If they take their machine to another
> network, that also uses DHCP, will specifying a class on the client side
> prevent them from getting an IP? I don't want to cause trouble for
> traveling
> users going to hotels or other offices that use DHCP and not be able to
> get
> an IP due to me specifying a class in their settings. Is this a valid
> concern or will other DHCP servers still be able to give our machines an
> address even though we specify a class?
>
> thanks
> Joe

Hi all,

In DHCP, in attempt to secure who gets a DHCP address, I was thinking of
specifying a class in the DHCP server and manually on the clients for the
scopes of my network. This way, if a client doesn't have the class specified
in their IP settings, they won't get an address from my DHCP server. My
question is this. If a client is a mobile user with a laptop, and we specify
the class in their IP settings. If they take their machine to another
network, that also uses DHCP, will specifying a class on the client side
prevent them from getting an IP? I don't want to cause trouble for traveling
users going to hotels or other offices that use DHCP and not be able to get
an IP due to me specifying a class in their settings. Is this a valid
concern or will other DHCP servers still be able to give our machines an
address even though we specify a class?

thanks
Joe

What doe you mean by class? Do you mean an RFC1918 address? Where would you
assign the class on a host and still allow them to be served by DHCP?

"ACE-Joe" <(E-Mail Removed)> wrote in message
news:2547B541-DE01-43FA-A2E9-(E-Mail Removed)...
> Hi all,
>
> In DHCP, in attempt to secure who gets a DHCP address, I was thinking
of
> specifying a class in the DHCP server and manually on the clients for the
> scopes of my network. This way, if a client doesn't have the class
specified
> in their IP settings, they won't get an address from my DHCP server. My
> question is this. If a client is a mobile user with a laptop, and we
specify
> the class in their IP settings. If they take their machine to another
> network, that also uses DHCP, will specifying a class on the client side
> prevent them from getting an IP? I don't want to cause trouble for
traveling
> users going to hotels or other offices that use DHCP and not be able to
get
> an IP due to me specifying a class in their settings. Is this a valid
> concern or will other DHCP servers still be able to give our machines an
> address even though we specify a class?
>
> thanks
> Joe

Great thanks, yes that does answer my question. I've never tested this
before in a real world environment, so I needed to get that question answered
before I proceeded to set this up.

thanks so much!!!

joe

"Miha Pihler [MVP]" wrote:

> Hi Joe,
>
> Yes, clients will be able to work from other networks without any problems.
>
> E.g. in my office we are using classes (for different reason that you plan
> to) but we use them and we get specific IPs depending on user's class on
> DHCP.
> I also have DHCP server at home where I don't use DHCP classes and I can
> still connect without any problem (and I do get totally different set of IP
> address then I get in the office).
>
> I hope this helps,
>
> --
> Mike
> Microsoft MVP - Windows Security
>
> "ACE-Joe" <(E-Mail Removed)> wrote in message
> news:2547B541-DE01-43FA-A2E9-(E-Mail Removed)...
> > Hi all,
> >
> > In DHCP, in attempt to secure who gets a DHCP address, I was thinking
> > of
> > specifying a class in the DHCP server and manually on the clients for the
> > scopes of my network. This way, if a client doesn't have the class
> > specified
> > in their IP settings, they won't get an address from my DHCP server. My
> > question is this. If a client is a mobile user with a laptop, and we
> > specify
> > the class in their IP settings. If they take their machine to another
> > network, that also uses DHCP, will specifying a class on the client side
> > prevent them from getting an IP? I don't want to cause trouble for
> > traveling
> > users going to hotels or other offices that use DHCP and not be able to
> > get
> > an IP due to me specifying a class in their settings. Is this a valid
> > concern or will other DHCP servers still be able to give our machines an
> > address even though we specify a class?
> >
> > thanks
> > Joe
>
>
>

I guess one other question this generates for me is this. If I set a user
or vendor class on the scope on the DNS server, will it only hand out
addresses to clients that have the same class name configured, or will it
hand out addresses to everyone anyway? I don't want it to hand out an
address unless the client has been configured with the class name manually.

Thanks
Joe

"Miha Pihler [MVP]" wrote:

> Hi Joe,
>
> Yes, clients will be able to work from other networks without any problems.
>
> E.g. in my office we are using classes (for different reason that you plan
> to) but we use them and we get specific IPs depending on user's class on
> DHCP.
> I also have DHCP server at home where I don't use DHCP classes and I can
> still connect without any problem (and I do get totally different set of IP
> address then I get in the office).
>
> I hope this helps,
>
> --
> Mike
> Microsoft MVP - Windows Security
>
> "ACE-Joe" <(E-Mail Removed)> wrote in message
> news:2547B541-DE01-43FA-A2E9-(E-Mail Removed)...
> > Hi all,
> >
> > In DHCP, in attempt to secure who gets a DHCP address, I was thinking
> > of
> > specifying a class in the DHCP server and manually on the clients for the
> > scopes of my network. This way, if a client doesn't have the class
> > specified
> > in their IP settings, they won't get an address from my DHCP server. My
> > question is this. If a client is a mobile user with a laptop, and we
> > specify
> > the class in their IP settings. If they take their machine to another
> > network, that also uses DHCP, will specifying a class on the client side
> > prevent them from getting an IP? I don't want to cause trouble for
> > traveling
> > users going to hotels or other offices that use DHCP and not be able to
> > get
> > an IP due to me specifying a class in their settings. Is this a valid
> > concern or will other DHCP servers still be able to give our machines an
> > address even though we specify a class?
> >
> > thanks
> > Joe
>
>
>

It will give out address any way. What custom classes will allow you to do
is to use e.g. different gateways or different scope options or even
different scopes on different clients depending on class settings.
E.g. user A gets IP address 10.10.10.151 with subnet mask 255.255.255.0 and
since it is "VIP" user it gets default gateway of 10.10.10.254 which is
faster leased line.
User B (a student without any custom class set) gets e.g. IP address
10.10.10.150 with subnet mask 255.255.255.0 with default gateway 10.10.10.1
on slower (and more busy) leased line.

There is no easy control of who gets the DHCP assigned IP address since
there is no authentication mechanism built into DHCP lease process.

--
Mike
Microsoft MVP - Windows Security


"ACE-Joe" <(E-Mail Removed)> wrote in message
news059656F-4310-4A21-9635-(E-Mail Removed)...
>I guess one other question this generates for me is this. If I set a user
> or vendor class on the scope on the DNS server, will it only hand out
> addresses to clients that have the same class name configured, or will it
> hand out addresses to everyone anyway? I don't want it to hand out an
> address unless the client has been configured with the class name
> manually.
>
> Thanks
> Joe
>
> "Miha Pihler [MVP]" wrote:
>
>> Hi Joe,
>>
>> Yes, clients will be able to work from other networks without any
>> problems.
>>
>> E.g. in my office we are using classes (for different reason that you
>> plan
>> to) but we use them and we get specific IPs depending on user's class on
>> DHCP.
>> I also have DHCP server at home where I don't use DHCP classes and I can
>> still connect without any problem (and I do get totally different set of
>> IP
>> address then I get in the office).
>>
>> I hope this helps,
>>
>> --
>> Mike
>> Microsoft MVP - Windows Security
>>
>> "ACE-Joe" <(E-Mail Removed)> wrote in message
>> news:2547B541-DE01-43FA-A2E9-(E-Mail Removed)...
>> > Hi all,
>> >
>> > In DHCP, in attempt to secure who gets a DHCP address, I was
>> > thinking
>> > of
>> > specifying a class in the DHCP server and manually on the clients for
>> > the
>> > scopes of my network. This way, if a client doesn't have the class
>> > specified
>> > in their IP settings, they won't get an address from my DHCP server.
>> > My
>> > question is this. If a client is a mobile user with a laptop, and we
>> > specify
>> > the class in their IP settings. If they take their machine to another
>> > network, that also uses DHCP, will specifying a class on the client
>> > side
>> > prevent them from getting an IP? I don't want to cause trouble for
>> > traveling
>> > users going to hotels or other offices that use DHCP and not be able to
>> > get
>> > an IP due to me specifying a class in their settings. Is this a valid
>> > concern or will other DHCP servers still be able to give our machines
>> > an
>> > address even though we specify a class?
>> >
>> > thanks
>> > Joe
>>
>>
>>

Does anyone know where I can find details on how to do the same thing in
Windows Nt 4.0 Server? I need to add a vendor class and have the procedure
for Win2k but the procedure for NT is totally different, especially on how to
enter the data.

"Miha Pihler [MVP]" wrote:

> It will give out address any way. What custom classes will allow you to do
> is to use e.g. different gateways or different scope options or even
> different scopes on different clients depending on class settings.
> E.g. user A gets IP address 10.10.10.151 with subnet mask 255.255.255.0 and
> since it is "VIP" user it gets default gateway of 10.10.10.254 which is
> faster leased line.
> User B (a student without any custom class set) gets e.g. IP address
> 10.10.10.150 with subnet mask 255.255.255.0 with default gateway 10.10.10.1
> on slower (and more busy) leased line.
>
> There is no easy control of who gets the DHCP assigned IP address since
> there is no authentication mechanism built into DHCP lease process.
>
> --
> Mike
> Microsoft MVP - Windows Security
>
>
> "ACE-Joe" <(E-Mail Removed)> wrote in message
> news059656F-4310-4A21-9635-(E-Mail Removed)...
> >I guess one other question this generates for me is this. If I set a user
> > or vendor class on the scope on the DNS server, will it only hand out
> > addresses to clients that have the same class name configured, or will it
> > hand out addresses to everyone anyway? I don't want it to hand out an
> > address unless the client has been configured with the class name
> > manually.
> >
> > Thanks
> > Joe
> >
> > "Miha Pihler [MVP]" wrote:
> >
> >> Hi Joe,
> >>
> >> Yes, clients will be able to work from other networks without any
> >> problems.
> >>
> >> E.g. in my office we are using classes (for different reason that you
> >> plan
> >> to) but we use them and we get specific IPs depending on user's class on
> >> DHCP.
> >> I also have DHCP server at home where I don't use DHCP classes and I can
> >> still connect without any problem (and I do get totally different set of
> >> IP
> >> address then I get in the office).
> >>
> >> I hope this helps,
> >>
> >> --
> >> Mike
> >> Microsoft MVP - Windows Security
> >>
> >> "ACE-Joe" <(E-Mail Removed)> wrote in message
> >> news:2547B541-DE01-43FA-A2E9-(E-Mail Removed)...
> >> > Hi all,
> >> >
> >> > In DHCP, in attempt to secure who gets a DHCP address, I was
> >> > thinking
> >> > of
> >> > specifying a class in the DHCP server and manually on the clients for
> >> > the
> >> > scopes of my network. This way, if a client doesn't have the class
> >> > specified
> >> > in their IP settings, they won't get an address from my DHCP server.
> >> > My
> >> > question is this. If a client is a mobile user with a laptop, and we
> >> > specify
> >> > the class in their IP settings. If they take their machine to another
> >> > network, that also uses DHCP, will specifying a class on the client
> >> > side
> >> > prevent them from getting an IP? I don't want to cause trouble for
> >> > traveling
> >> > users going to hotels or other offices that use DHCP and not be able to
> >> > get
> >> > an IP due to me specifying a class in their settings. Is this a valid
> >> > concern or will other DHCP servers still be able to give our machines
> >> > an
> >> > address even though we specify a class?
> >> >
> >> > thanks
> >> > Joe
> >>
> >>
> >>
>
>
>