topic DHCP MAC binding in Network Security

DHCP MAC binding

sagarpanday — Mon, 11 Mar 2019 19:09:15 GMT

hi all

I have cisco 800 router, router configure as DHCP server, i want to bind user MAC ID with IP and block only Internet Access.

please assist

sagar panday

Re: DHCP MAC binding

Magnus Mortensen — Mon, 15 Nov 2010 01:37:41 GMT

Sagar,

You can creates specific dhcp pools for hosts with the following example:

ip dhcp pool Desktop1
host 192.168.2.55
hardware-address 0a0a.0b0b.0c0c ieee802
client-name Dsktop1

Then use access-list to control your internet acces.

- Magnus

Re: DHCP MAC binding

sagarpanday — Wed, 17 Nov 2010 09:08:30 GMT

thanks magnus for your help

one more thing for each client (MAC ) i have to create seperate DHCP pool,

can you please give me example of access list.

thanks with regards

sagar panday

Re: DHCP MAC binding

Kureli Sankar — Wed, 17 Nov 2010 19:50:31 GMT

Yes, you should create a separate pool for each MAC.

Once done you can use acl to restrict access.

conf t

access-l 100 permit tcp ho 192.168.2.55 any eq 80

(Then apply this acl on an interface behind which this host lives.)

int e0

ip access-g 100 in

-KS

Re: DHCP MAC binding

sagarpanday — Fri, 19 Nov 2010 13:34:58 GMT

Dear Poonguzhali

Thanks so much for reply

i have configured my router as

ip dhcp pool xxx
   host 192.168.1.4 255.255.255.0
   hardware-address 0026.9e9d.9466 ieee802
   client-name xxx
   default-router 192.168.1.1
   dns-server x.x.x.x

but PC (0026.9e9d.9466) is not getting IP (192.168.1.4) .from router.

please assist

regards

sagar

Re: DHCP MAC binding

Dan-Ciprian Cicioiu — Fri, 19 Nov 2010 14:12:58 GMT

Hello ,

Can you try :

ip dhcp pool user

host 192.168.1.4 255.255.255.0

client-identifier 0026.9e9d.9466

if not , please post show ip dhcp bind

Dan

DHCP MAC binding

arkachakraborty — Tue, 30 Apr 2013 06:52:41 GMT

you could use XLATE command also