Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Open wlan: prevent multi-NIC hosts from getting multiple IP's?

    Scheduled Pinned Locked Moved DHCP and DNS
    4 Posts 2 Posters 1.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S Offline
      senser
      last edited by

      I am running an open wlan. Each client is being bandwidth limited (by IP). Some long term user just got a second NIC to get double the bandwidth. I think that is kind of cool/smart but… if the trend continues I might have to do something about it.

      Is there a nice and easy way to handle this kind of "abuse"?
      Manually banning mac's comes to my mind - It's tedious though and can easily be worked around with spoofing.
      Can DHCP be configured to only hand out one IP per host?

      pfSense is in control of the DHCP leases BTW.

      Thanks

      We use the mighty pf, we cannot be fooled.

      1 Reply Last reply Reply Quote 0
      • D Offline
        doktornotor Banned
        last edited by

        @senser:

        Can DHCP be configured to only hand out one IP per host?

        Hum…. Host == MAC address. :)

        1 Reply Last reply Reply Quote 0
        • S Offline
          senser
          last edited by

          I think I know what you are trying to say: that for DHCP there is just no way to determine if two NIC's belong to the same host because, since MAC addresses is all that DHCP cares about, for DHCP a MAC address is equivalent to a host. Right?

          We use the mighty pf, we cannot be fooled.

          1 Reply Last reply Reply Quote 0
          • D Offline
            doktornotor Banned
            last edited by

            Yeah, exactly… A rather heavy approach would be setting up static DHCP leases for everything and configuring the static ARP for everything as well. However, that could be usable in enterprise environment, not with
            open wlan, I'm afraid.

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.