Windows Forum

Ask something
Discussion Locked

DHCP Server Configuration

0 helpful
15 replies

by joshhansen

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
On windows server 2003 running DHCP server services, I would like to create a scope with 20 assignable ip addresses but only give these address to a list of approved MAC addresses. We don't care what address is given, just that it is give to an approved MAC address. I don't want to assign a specific address to a specif MAC. Here is why... We use DHCP for laptop computers only. There are about 50 laptop users but we would never have all 50 at the same location at the same time. If our scope is set to a pool of 20 addresses or less, that would be preferred. How can this be done? Thanks

15 replies

by cg it

create reservations for IP addresses in the scope to specific MAC addresses. Create reservations for each MAC address. Non-leased IPs in the pool must be reserved to non-existant MAC addresses.

Text book answer.

by cg it

note: it's a pain in the butt to manage [real pain]. better to just use static IP's

by joshhansen

I don't want to assign a specific mac addresses to a specific ip address (that is how we do it now for our roaming laptop users ). I just want a small pool of ip addresseses to be assigned only to approved mac addresseses - that way no can just plug in and get an address without prior approval.

by cg it

This is the only way to do it via DHCP using a Pool of addresses and MAC addresses. If you know of another way please let us know.

But to have a scope with a set # of IP addresses and only particular MAC addresses can be assigned addresses from that pool, you have to create a reservation for both IP and MAC in the scope.

by cg it

this is text book stuff for designing security for DHCP in a Windows 2000/2003 Active Directory environment. see "Preventing Unauthorized DHCP clients from Leasing IP Addresses".

Part of the MCSE elective core design requirements. See: Designing Microsoft Windows 2000 Network Security exam 70-220 chapter 9 page 300.
exam 70220

by joshhansen

That is why I posted this question - to see if I could have a pool of addresses that could be assigned to any requestor but only if their mac address was on the "approved" list without having to specifying what mac address gets what address.

by voldar

joshhansen - there is no possibility to do what you want in Windows - assign MAC addresses to an IP pool range, but the solution I gave you will do almost the same thing: specific computers receiving IP addresses from a specific IP pool range.

by Former member

Hi joshhansen,
Did you find solution for your problem. I am faing the exact situation.
I want to asign IP from a pool but only to trusted macaddress's.

This discussion is closed to new replies.