Re: DHCP - assigning address by MAC

[Scott Klement <midrange-l@xxxxxxxxxxxxxxxx>]

> Have a situation  where we want to restrict  web access  from certain
> users.
> Firewall requires configuration by IP address.

I use a FreeBSD machine as my gateway & firewall.  It's also the domain 
controller for the Windows domain of my network.  Whenever someone signs 
on to the network, I have Samba run a shell script that adds a firewall 
rule either allowing or denying that user Internet access.

That way, whether or not the user has Internet access is entirely 
dependent on who is logged on.

For me, that works better than doing it by IP address or MAC address.

Not sure if this would be possible in your setup, but it's food for 
thought.