Prohibition of the Internet

[Chuck Anderson]

On Tue, Jan 12, 2010 at 10:07:42PM -0500, Alan Clegg wrote:
> syhshanda wrote:
> > Hi,
> >   I have read the dhcpd.conf. But this method cannot prohibit the client
> > from accessing the network. Also,thanks for you help.
> 
> DHCP can be configured to _NOT_ give a device an address, but can not be
> configured to keep a device from just using one of its own choosing..
> 
> It sounds like you need to invest in a firewall.

DHCP allow/deny configuration combined with a DHCP-snooping/IP Source 
Guard/ARP Inspection capable switch can make an effective security 
mechanism.