Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.networking > #4128 > unrolled thread

DHCP server with MAC filtering - something went wrong

Back to article view | Back to comp.os.linux.networking

Contents

  DHCP server with MAC filtering - something went wrong "B. P. TBC" <bp.tbc.z87@gmail.com> - 2018-05-03 09:59 +0200
    Re: DHCP server with MAC filtering - something went wrong Dan Purgert <dan@djph.net> - 2018-05-03 12:50 +0000
      Re: DHCP server with MAC filtering - something went wrong "Jonathan N. Little" <lws4art@gmail.com> - 2018-05-03 12:50 -0400

#4128 — DHCP server with MAC filtering - something went wrong

Hi all!!
I want to configure a DHCP server, with MAC filtering. I try to 
configure it, but I can't set up MAC filtering.
Without the filtering, it works perfectly. My dhcpd.conf file:

option domain-name-servers 192.168.1.1, 8.8.8.8;
option routers 192.168.1.1;
ddns-update-style interim;
max-lease-time 14400;
default-lease-time 14400;
subnet 192.168.1.0 netmask 255.255.255.0 {
range 192.168.1.100 192.168.1.199;
default-lease-time 14400;
max-lease-time 172800;
}
But when I try to set up MAC filtering, nobody got IP-address.
My dhcpd.con file (I replaced some data with "x", because of privacy 
reasons.):

option domain-name-servers 192.168.1.1, 8.8.8.8;
option routers 192.168.1.1;
class "frizbi" {
match if substring(hardware,1,3) = 90:00:4e;
}
class "hpnotebook" {
match if substring(hardware,1,3) = 74:de:2b;
}
class "xxxxhp" {
match if substring(hardware,1,3) = 78:62:56;
}
class "xxxxdell" {
match if substring(hardware,1,3) = 0c:d2:92;
}
class "xxxxdell2" {
match if substring(hardware,1,3) = f8:63:3f;
}
class "hpnotebookvez" {
match if substring(hardware,1,3) = 2c:76:80;
}
ddns-update-style interim;
max-lease-time 14400;
default-lease-time 14400;
subnet 192.168.1.0 netmask 255.255.255.0 {
pool {
range 192.168.1.100 192.168.1.199;
default-lease-time 14400;
max-lease-time 172800;
allow members of "frizbi";
allow members of "hpnotebook";
allow members of "xxxxhp";
allow members of "xxxxdell";
allow members of "xxxxdell2";
allow members of "hpnotebookvez";
host xxxx {
hardware ethernet 44:6d:6c:a5:a7:xx;
}
host xxxx {
hardware ethernet 70:f1:a1:88:ff:xx;
}
host xxxx {
hardware ethernet 4c:80:93:8e:0c:xx;
}
host xxxx {
hardware ethernet 34:de:1a:af:b3:xx;
}
host xxxx {
hardware ethernet d0:df:9a:9f:17:xx;
}
host xxxx {
hardware ethernet 00:e1:8c:ee:25:xx;
}
host xxxx {
hardware ethernet 00:71:cc:6c:35:xx;
}
host xxxx {
hardware ethernet a4:17:31:18:98:xx;
}
host xxxx {
hardware ethernet 60:57:18:25:e8:xx;
}
host xxxx {
hardware ethernet 4c:8d:79:0b:0f:xx;
}
host xxxx {
hardware ethernet c0:d9:62:dc:92:xx;
}
host xxxx {
hardware ethernet 00:5a:13:11:e5:xx;
}
host xxxx {
hardware ethernet f4:f5:24:e1:01:xx;
}
host xxxx {
hardware ethernet 00:6d:52:19:36:xx;
}
host xxxx {
hardware ethernet 04:b1:67:9a:01:xx;
}
host xxxx {
hardware ethernet 44:6d:6c:54:ca:xx;
}
host xxxx {
hardware ethernet f8:28:19:df:1d:xx;
}
# deny unknown-clients;
}
}

Can you help me, what made I wrong?
Thank you!
P.

---
Ezt az e-mailt az Avast víruskereső szoftver átvizsgálta.
https://www.avast.com/antivirus

[toc] | [next] | [standalone]

#4129

B. P. TBC wrote:
> Can you help me, what made I wrong?
> Thank you!

Your sig line has three '-' in it.  Also MAC addresses don't have 'x' in
them ;)

Serious answer - I'm not sure the rules at the top are doing what you
think they're doing -- might be a good idea to take them out.  For the
hosts, I can't remember the syntax offhand; but aren't the DHCP
reservations also supposed to include an IP address?


-- 
|_|O|_| Registered Linux user #585947
|_|_|O| Github: https://github.com/dpurgert
|O|O|O| PGP: 05CA 9A50 3F2E 1335 4DC5  4AEE 8E11 DDF3 1279 A281

[toc] | [prev] | [next] | [standalone]

#4130

Dan Purgert wrote:
> B. P. TBC wrote:
>> Can you help me, what made I wrong?
>> Thank you!
> 
> Your sig line has three '-' in it.  Also MAC addresses don't have 'x' in
> them ;)
> 
> Serious answer - I'm not sure the rules at the top are doing what you
> think they're doing -- might be a good idea to take them out.  For the
> hosts, I can't remember the syntax offhand; but aren't the DHCP
> reservations also supposed to include an IP address?
> 
> 
Yes they are:

host rumputator {
   hardware ethernet  dc:0e:a1:f6:2c:98;
   fixed-address 192.168.1.152;
}

-- 
Take care,

Jonathan
-------------------
LITTLE WORKS STUDIO
http://www.LittleWorksStudio.com

[toc] | [prev] | [standalone]

Back to top | Article view | comp.os.linux.networking

csiph-web