Deny DHCP Address by MAC?

[Eric Helm]

On 7/16/2010 3:38 PM, Jeff Wieland wrote:
> class "black-hole" {
>    match substring (hardware, 1, 6);
>    # deny booting;
>    ignore booting;
> }
> subclass "black-hole" 00:12:ba:1d:c1:b7;
> subclass "black-hole" 00:12:df:b6:7b:e7;

Could this be successfully modified to block an entire manufacturer OUI
group of MACs with the following syntax:

class "black-hole" {
   match substring (hardware, 1, 3);
   # deny booting;
   ignore booting;
}
subclass "black-hole" 00:12:ba;
subclass "black-hole" 00:12:bb;

Thanks,

/Eric