global config to force phone to use private subnet in shared-network environment
Glenn Satchell
glenn.satchell at uniq.com.au
Wed Jul 20 23:27:44 UTC 2011
Hi Sue
So you want to allow or deny a particular class in some of the pools in
your definition, right? So if you think about it, you have to list the
pools and whether the class is allowed in each. The only logical way to
do this is in each pool.
If you have hundreds of networks have you thought of using a script
based method of generating your configuration file? Maybe a script that
writes out a file that can be included in dhcpd.conf that lists all the
shared-networks?
regards,
-glenn
On 07/21/11 03:54, Sue True wrote:
>
> So is there other way to accomplish what I am trying to do here, we have
> hundreds shared-networks, phone will be deployed on most of the networks
> and assigned from 10.10.x.x subnet.
>
> So I try to avoid adding 'allow/deny' to each network if there globally
> option can do that, I thought about doing it using class, like this, but
> not sure how:
>
> class "i2004-clients" {
> match if substring(option vendor-class-identifier, 0, 14) =
> "Nortel-i2004-A" ;
>
> ##only allow 10.10.x.x address?
> }
>
> Thanks!
> Sue
>
>
> On Wed, 20 Jul 2011, Randall C Grimshaw wrote:
>
>> The short answer is no.
>> The allow / deny rules control pool access... there is no global pool
>> that would span all subnets - if you see what I mean. In addition,
>> there is an issue with windows behaviour as subsequent to obtaining the
>> lease it does some network discovery using DHCP inform requests. If
>> you do have any global values set such as DNS servers... any subnet
>> local values provided to support i.e. a landing page for your private
>> network will be overridden.
>>
>> Randall Grimshaw rgrimsha at syr.edu
>> ________________________________________
>> From: dhcp-users-bounces+rgrimsha=syr.edu at lists.isc.org
>> [dhcp-users-bounces+rgrimsha=syr.edu at lists.isc.org] On Behalf Of Sue
>> True [bloomingtonian at gmail.com]
>> Sent: Wednesday, July 20, 2011 11:56 AM
>> To: Users of ISC DHCP
>> Subject: global config to force phone to use private subnet in
>> shared-network enviroment?
>>
>> Greetings,
>>
>> I've been trying to get this work with no luck, so I'll ask the list to
>> see if it's possible.
>>
>> In our config, we usually have two subnets in a shared-network, one is
>> private(10.10.x.x) used for phones, the other is public, right now we
>> have
>> class defined for phone, and config 'allow/deny member' to each
>> private/public subnet so phones pickup address from 10.10 network only.
>>
>> Since we have hundreds of networks and I wonder if there is a way achieve
>> the above using global option, I've tried
>>
>> if binary-to-ascii(10,8,".",substring(leased-address,0,2)) = "10.10" {
>> allow members of "i2004-clients";
>> }else{
>> deny members of "i2004-clients";
>> }
>>
>> But got error:
>> /etc/dhcpd/dhcpd.conf line 147: expecting allow/deny key
>> deny members
>>
>>
>>
>> Thanks in advance..
>> Sue
>> _______________________________________________
More information about the dhcp-users
mailing list