DHCP server a vyrazeni nekterych MAC adres...

Martin Duda duda na lib.cas.cz
Pondělí Srpen 15 16:53:50 CEST 2005


Zdravim,

no nedalo mi to a jeste jsem si s tim isc-dhcpd serverem pohral a tato 
konfigurace je funkcni, nevim zda-li idealni:)
...
not authoritative;
use-host-decl-names on;
ddns-updates off;
log-facility local7;

class "SunRay_group" {
    match if substring ( hardware, 1, 3 ) = 08:00:20;
}

subclass "SunRay_group" 08:00:20:b0:ec:b7;
subclass "SunRay_group" 08:00:20:c0:ec:ac;
subclass "SunRay_group" 08:00:20:b9:03:a7;
subclass "SunRay_group" 08:00:20:c0:ed:1d;
subclass "SunRay_group" 08:00:20:f8:ff:b9;
subclass "SunRay_group" 08:00:20:c1:86:ae;
subclass "SunRay_group" 08:00:20:c0:e0:00;
subclass "SunRay_group" 08:00:20:c2:fa:2b;
subclass "SunRay_group" 08:00:20:c1:4a:c9;
subclass "SunRay_group" 08:00:20:f8:a4:27;
subclass "SunRay_group" 08:00:20:d8:84:c8;

shared-network my_net {

    subnet 172.16.0.0 netmask 255.255.0.0 {
        max-lease-time 7200;
        default-lease-time 3600;
        server-identifier 172.16.0.1;
        option routers 172.16.0.1;
        option subnet-mask 255.255.0.0;
        option ip-forwarding false;
        pool {
            deny members of "SunRay_group";
            range 172.16.0.10 172.16.0.20;
        }
        allow unknown-clients;
        one-lease-per-client true;
    }

}
...

Treba se to nekomu bude hodit.

Duda


Martin Duda napsal(a):

>Zdravim,
>
>mam pravdepodobne trivialni dotaz, ale nejak nevidim kde mam problem v 
>konfiguraci:(
>
>dhcp3 server - Debian Sarge
>
>Cely problem je v tom, ze potrebuji zakazat pridelovani IP adres pro 
>urcite MAC adresy, pouzil jsem tuto konfiguraci:
>
>...
>authoritative;
>use-host-decl-names on;
>ddns-updates off;
>log-facility local7;
>
>class "SunRay_group" {
>    match hardware;
>}
>
>subclass "SunRay_group" 08:00:20:d8:84:c8;
>
>shared-network my_net {
>
>    subnet 172.16.0.0 netmask 255.255.0.0 {
>        max-lease-time 7200;
>        default-lease-time 3600;
>        server-identifier 172.16.0.1;
>        option routers 172.16.0.1;
>        option subnet-mask 255.255.0.0;
>        option ip-forwarding false;
>        pool {
>            deny members of "SunRay_group";
>            range  172.16.0.10 172.16.0.20;
>        }
>        allow unknown-clients;
>        one-lease-per-client true;
>    }
>
>}
>...
>
>nicmene DHCP server vesele prideluje IP adresy dal:( nevite prosim nekdo 
>kde je chyba? Ma konfigurace vychazi v podstate z man stranek, hledal 
>jsem i ruzne na inetu a reseni bylo vzdy podobne. Dalsim resenim by bylo 
>zakazovat vybrane MAC pomoci iptables, ale reseni primo v DHCP serveru 
>mi prijde cistsi. Dekuji predem za kazdou radu ci nasmerovani.
>
>Duda
>
>  
>


Další informace o konferenci Linux