Selective DHCP

Hello

In our network, IP addresses are are given through DHCP. We have a defined scope, etc. Unfortunately, anyone can plug their computer into the network here --college campus--(they cannot enter our Active Directory domain) and receive an Internet connection, which is something we do not want. How can I keep rogue users from using our Internet connection while not interfering with DHCP as well as without having to go the MAC address identification method to allow people access to the Internet gateway? Thanks for any help provided.

"Rod" wrote in message
news:F55F3F3F-3997-4450-B0CE-(E-Mail Removed)...

: In our network, IP addresses are are given through DHCP. We have a defined
scope, etc. Unfortunately, anyone can plug their computer into the network
here --college campus--(they cannot enter our Active Directory domain) and
receive an Internet connection, which is something we do not want. How can I
keep rogue users from using our Internet connection while not interfering
with DHCP as well as without having to go the MAC address identification
method to allow people access to the Internet gateway? Thanks for any help
provided.

That's a trick question Rod considering they don't need to use your DHCP
server to use an IP address on your subnet that routes to the Internet. If
the route from your local subnet is via a router to the Internet, then this
is where you would control it. Your DHCP server assigns IP addresses
dynamically. It has no control over IP addresses assigned manually.

--
Roland Hall
/* This information is distributed in the hope that it will be useful, but
without any warranty; without even the implied warranty of merchantability
or fitness for a particular purpose. */
Online Support for IT Professionals -
http://support.microsoft.com/service...p?fr=0&sd=tech
How-to: Windows 2000 DNS:
http://support.microsoft.com/default...b;EN-US;308201
FAQ W2K/2K3 DNS:
http://support.microsoft.com/default...b;EN-US;291382

802.1X ...
If the switches on your network support 802.1X you could use por
control, where a username and passowrd are authenticated b
Radius/Active directory before the port on the switch is enabled