DHCP server a vyrazeni nekterych MAC adres...
Martin Duda
duda na lib.cas.cz
Pondělí Srpen 15 16:53:50 CEST 2005
Zdravim,
no nedalo mi to a jeste jsem si s tim isc-dhcpd serverem pohral a tato
konfigurace je funkcni, nevim zda-li idealni:)
...
not authoritative;
use-host-decl-names on;
ddns-updates off;
log-facility local7;
class "SunRay_group" {
match if substring ( hardware, 1, 3 ) = 08:00:20;
}
subclass "SunRay_group" 08:00:20:b0:ec:b7;
subclass "SunRay_group" 08:00:20:c0:ec:ac;
subclass "SunRay_group" 08:00:20:b9:03:a7;
subclass "SunRay_group" 08:00:20:c0:ed:1d;
subclass "SunRay_group" 08:00:20:f8:ff:b9;
subclass "SunRay_group" 08:00:20:c1:86:ae;
subclass "SunRay_group" 08:00:20:c0:e0:00;
subclass "SunRay_group" 08:00:20:c2:fa:2b;
subclass "SunRay_group" 08:00:20:c1:4a:c9;
subclass "SunRay_group" 08:00:20:f8:a4:27;
subclass "SunRay_group" 08:00:20:d8:84:c8;
shared-network my_net {
subnet 172.16.0.0 netmask 255.255.0.0 {
max-lease-time 7200;
default-lease-time 3600;
server-identifier 172.16.0.1;
option routers 172.16.0.1;
option subnet-mask 255.255.0.0;
option ip-forwarding false;
pool {
deny members of "SunRay_group";
range 172.16.0.10 172.16.0.20;
}
allow unknown-clients;
one-lease-per-client true;
}
}
...
Treba se to nekomu bude hodit.
Duda
Martin Duda napsal(a):
>Zdravim,
>
>mam pravdepodobne trivialni dotaz, ale nejak nevidim kde mam problem v
>konfiguraci:(
>
>dhcp3 server - Debian Sarge
>
>Cely problem je v tom, ze potrebuji zakazat pridelovani IP adres pro
>urcite MAC adresy, pouzil jsem tuto konfiguraci:
>
>...
>authoritative;
>use-host-decl-names on;
>ddns-updates off;
>log-facility local7;
>
>class "SunRay_group" {
> match hardware;
>}
>
>subclass "SunRay_group" 08:00:20:d8:84:c8;
>
>shared-network my_net {
>
> subnet 172.16.0.0 netmask 255.255.0.0 {
> max-lease-time 7200;
> default-lease-time 3600;
> server-identifier 172.16.0.1;
> option routers 172.16.0.1;
> option subnet-mask 255.255.0.0;
> option ip-forwarding false;
> pool {
> deny members of "SunRay_group";
> range 172.16.0.10 172.16.0.20;
> }
> allow unknown-clients;
> one-lease-per-client true;
> }
>
>}
>...
>
>nicmene DHCP server vesele prideluje IP adresy dal:( nevite prosim nekdo
>kde je chyba? Ma konfigurace vychazi v podstate z man stranek, hledal
>jsem i ruzne na inetu a reseni bylo vzdy podobne. Dalsim resenim by bylo
>zakazovat vybrane MAC pomoci iptables, ale reseni primo v DHCP serveru
>mi prijde cistsi. Dekuji predem za kazdou radu ci nasmerovani.
>
>Duda
>
>
>
Další informace o konferenci Linux