Permit/Deny MAC Addresses per subnet

[sthaug at nethelp.no]

> I need to build a DHCP server that will serve a few hundred subnets.
> There are specific security requirements for each of these subnets.
> There are a handful of techs that have permission to work on each or
> some of these subnets. I need each tech to be able to DHCP from a small
> pool within each subnet. So I need some MAC addresses to be allowed on
> certain subnets, but not others.

Not to rain on your parade here - but you are of course aware that
basically all modern NICs let you change the MAC addresses? In other
words, basing security on the MAC address is rather doubtful.

Steinar Haug, Nethelp consulting, sthaug at nethelp.no