Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Help me with dhcp

    General pfSense Questions
    2
    2
    545
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      thomasassina last edited by

      Now I have pfsense runing on my wired network with about 50 computers connected now. My problem now is anytime someone plugs in the cat5 into their personal computer the dhcp gives them IP. I want it to give IPs to anly workstations not personal computers. How do I do that?

      1 Reply Last reply Reply Quote 0
      • johnpoz
        johnpoz LAYER 8 Global Moderator last edited by

        Well you could enable "Deny unknown clients"  And create reservations for all your workstations.

        From a general security setting any ports not in use should be disabled, if users are plugging into unused ports those ports should be off in the first place.

        Now sure what your using for switching, but many managed switches provide for port security.  Look into cisco port security for example.

        http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/port_sec.html

        This can allow you prevent users from unplugging their workstations from the port on the wall and plugging in their devices.  Now if they are smart enough to change the mac your out of luck :)

        But this is more security than just not giving them a dhcp address.  You can also enable Static ARP entries in pfsense, now it will only talk to devices it has reservation for, etc.  This prevents users from just putting in a static IP on your network.

        You could look into a fullblown NAC or NAP..
        http://en.wikipedia.org/wiki/Network_Access_Control

        Something like http://www.packetfence.org/ comes to mind.

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        2440 2.4.5p1 | 2x 3100 2.4.4p3 | 2x 3100 22.01 | 4860 22.01

        1 Reply Last reply Reply Quote 0
        • First post
          Last post