OT: DHCP IP address lockdown

[Niall O'Reilly]

On 8 Dec 2011, at 19:20, Frank Sweetser wrote:

> Alternatively, depending on your edge switch vendor, they may have features to
> enforce usage of DHCP on clients.  They snoop DHCP transactions, and filter
> out traffic from a given MAC until it successfully gets an IP address from a
> DHCP server via a trusted uplink port.  Ideally, it will also include some
> form of IP/ARP inspection to ensure that the machine uses only its DHCP
> assigned IP address.

	We've planned to do this, and have started rolling it out.
	/Niall