12-21-2016 04:11 PM - edited 03-08-2019 08:40 AM
Hi guys
I need your help with something, here in the office we got a DHCP Pool on the core switches and we need to configure some kind of restriction using the DHCP. What I'm trying to say is this. if a user is trying to configure a static IP on his device he don't be allow to use the network, it will only work using the DHCP pool assigned to the users.
Is there some kind of configuration like switchport security or something similar but using the DHCP pool.?
Regards
Solved! Go to Solution.
12-21-2016 10:21 PM
Dhcp snooping with dynamic arp inspection or ip source guard can help you achieve this. Please review following links:
http://packetlife.net/blog/2010/aug/18/dhcp-snooping-and-dynamic-arp-inspection/
http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SY/configuration/guide/sy_swcg/ip_source_guard.html
http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SX/configuration/guide/book/dynarp.html
-
AJ
12-21-2016 05:17 PM
I am no Windows AD person but I know AD/Group Policy can do this.
12-21-2016 10:21 PM
Dhcp snooping with dynamic arp inspection or ip source guard can help you achieve this. Please review following links:
http://packetlife.net/blog/2010/aug/18/dhcp-snooping-and-dynamic-arp-inspection/
http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SY/configuration/guide/sy_swcg/ip_source_guard.html
http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SX/configuration/guide/book/dynarp.html
-
AJ
12-22-2016 08:21 AM
Hello
Snooping - DAI and IPSG will not assist here
To negate users from applying statics to their pcs would require a local group policy on each pc to tie down access to the nic properties
This is something active directory can do but not i am aware it's possible from a Cisco perspective
res
paul
12-22-2016 01:06 PM
Thank you all for all the asnwers, A friend told something about Snooping and dynamic arp but i couldn't find anything. So I will test this on la lab and hope it works.
Regards
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide