Koozali.org: home of the SME Server

Contribs.org Forums => General Discussion => Topic started by: sdpiowa on April 06, 2009, 08:47:43 PM

Title: MAC Address Lockout
Post by: sdpiowa on April 06, 2009, 08:47:43 PM

I have the DHCP service enabled on SME Server.  Is there a way to keep new computers from joining our wireless network unless I specifically give them access?  I already have a password set, but I was looking for a "network lockout" feature like they include in Network Magic.

Title: Re: MAC Address Lockout
Post by: David Harper on April 07, 2009, 06:11:07 AM

You can maintain a list of reserved DHCP addresses using the Hostnames server maanger panel. Once this is done, you can stop DHCP from issuing addresses to unknown clients by reducing the pool of available addresses to the same number of reserved addresses.

Thus if any unauthorised clients attempt to connect, they will not receive an address because there are no spares.

Alternatively, you could use MAC address security on your wireless AP to prevent unauthorised clients from connecting at all. This might be a better option, because refusing a DHCP address doesn't help if a user knows the network (even passingly), because they can just give themselves a static IP.

Title: Re: MAC Address Lockout
Post by: mmccarn on April 07, 2009, 02:42:27 PM

You may want to look at CoovaChilli (http://wiki.contribs.org/CoovaChilli) - it sets provides you with a wireless "hotspot" for your sme on a separate network segment (note: I've never used it, but it intrigues me).