Deny DHCP Address by MAC?

Tim Evans tkevans at tkevans.com
Fri Jul 16 21:00:04 UTC 2010


On 07/16/10 16:38, Jeff Wieland wrote:
> What we usually do is to create a class called something like "black-hole",
> and then use subclasses to match on it. Something like:
>
> class "black-hole" {
> match substring (hardware, 1, 6);
> # deny booting;
> ignore booting;
> }
> subclass "black-hole" 00:12:ba:1d:c1:b7;
> subclass "black-hole" 00:12:df:b6:7b:e7;
>
> You can have as many of the "subclass" statements as you need. This uses an
> ignore booting command, which causes dhcpd to do nothing when it see that
> MAC address. If you comment out the "ignore booting" and uncomment the
> "deny booting", it will send an DHCPNAK (IIRC) to the client instead.

Thanks.  Does simply restarting dhcpd after this sort of edit to the 
conf file take away the outstanding lease? If not, how to do so?
-- 
Tim Evans, TKEvans.com, Inc.	|   5 Chestnut Court
UNIX System Admin Consulting	|   Owings Mills, MD 21117
http://www.tkevans.com/		|   443-394-3864
http://www.come-here.com/News/	|   tkevans at tkevans.com



More information about the dhcp-users mailing list