Topic: Force DHCP To Refuse Clients A DHCP Lease Depending On Client MAC Address

[Franco]

This is what he's looking for:

Code: [Select]

mkdir -p /etc/e-smith/templates-custom/etc/dhcpd.conf

echo " deny unknown-clients;" > /etc/e-smith/templates-custom/etc/dhcpd.conf/25DenyUnknownHost

[hatsa]

thanx stuntshell you are the one 

[hatsa]

plz i want to Deny the pc's that have manual IP the pc's that didn't use the dhcp server to get ip plz i want to deny them to just tell me

[David Harper]

That is a seperate problem. It depends on what you want to block them from doing.

If you want to restrict Internet access, try DansGuardian.

If you want to block all network access by unauthorised users, you could investigate MAC address security on your switches.

[hatsa]

thanx David Harper but i have tryed it befour i am wating for you stuntshell

[CharlieBrady]

plz i want to Deny the pc's that have manual IP the pc's that didn't use the dhcp server to get ip

If that is what you wanted, then that is what you should have asked for. You have wasted a lot of people's time by saying that you wanted to refuse clients a DHCP lease.

SME server has no facility for selectively blocking or ignoring LAN traffic. You will need to develop it yourself, or use the capabilities of a higher end ethernet switch.

[David Harper]

I recommend TP-Link web managed switches. They have MAC security and are affordably priced.

[cactus]

If that is what you wanted, then that is what you should have asked for. You have wasted a lot of people's time by saying that you wanted to refuse clients a DHCP lease.

I second that, please read and try to follow the guidelines set out here: http://wiki.contribs.org/SME_Server:Community:Forum

[Stefano]

I second that, please read and try to follow the guidelines set out here: http://wiki.contribs.org/SME_Server:Community:Forum

I will add: hatsa please write in plain english and not in sms way, thank you

[Franco]

plz i want to Deny the pc's that have manual IP the pc's that didn't use the dhcp server to get ip plz i want to deny them to just tell me

That will be an ARP feature, not DHCP. You'll need to make all your entries static, it will be a lot of work since SME is not really designed for that. Please follow the suggestions above or change your topology, by either adding a router that does the job, or a switch capable of controlling the ARP entries.

Thanks,