Re: DHCP - assigning address by MAC

[Sean Porterfield <sporter@xxxxxxxxxxxx>]

James Lundy wrote:
> Is it possible to assign addresses by MAC address?

I didn't find a way to get the iSeries to give out specific addresses 
which is why I am switching to a Linux DHCP server (but not for the same 
reason as you.)

> Have a situation  where we want to restrict  web access  from certain 
> users. 
>
> Firewall requires configuration by IP address. 
>
> If I manually configure PC's address there is nothing to prevent user 
> from changing to DHCP and getting  an address that access is permitted.  
> Whips and chains are not allowed.

Think about it the other way around, though.  If you configured them on 
DHCP to get an address that is not allowed to access the web, what would 
stop them from changing to a manual address that is allowed?

One more thing - limited users cannot configure network settings, so you 
shouldn't have to worry about that.

If you only want certain users to access the web, it seems to me the 
"correct" solution is to require a username/password for the firewall to 
allow it.