Filtering by MAC address

Randall C Grimshaw rgrimsha at syr.edu
Tue Feb 7 13:29:19 UTC 2012


You may also find it useful to read the Vendor-Class-ID
Or consider LLDP-MED VLAN steering on your switches
(We have not gone production with VOIP, testing only)

Randall Grimshaw rgrimsha at syr.edu
________________________________________
From: dhcp-users-bounces+rgrimsha=syr.edu at lists.isc.org [dhcp-users-bounces+rgrimsha=syr.edu at lists.isc.org] on behalf of Glenn Satchell [glenn.satchell at uniq.com.au]
Sent: Tuesday, February 07, 2012 6:24 AM
To: Users of ISC DHCP
Subject: Re: Filtering by MAC address

Hi Olivier

This has been covered on the list in the past, but the general idea is
to create a class that matches a substring of the cisco mac address.
Then use two pools in each subnet: one allowed for the cisco devices,
and one denying the cisco for everything else.

class "voip" {
   match substring(hardware, 0, 3);
}
subclass "cisco" aa:bb:cc;
# add more subclass lines if needed.

subnet ... {
   pool {
     range ...
     allow members of "cisco";
   }
   pool {
     range ...
     deny members of "cisco";
   }
}

regards,
-glenn

On 7/02/2012 9:34 PM, Olivier Nicole wrote:
> Hi,
>
> On my network, I want my DHCP server to give a public IP address to
> the computers and a private IP address to all the VoIP phones.
>
> The VoIP phones are all Cisco, so I can identify the by the vendor
> prefix of the MAC address.
>
> How to configure my DHCP server to give IP from one range is the MAC
> address is from Cisco and give IP from another range else?
>
> Best regards,
>
> Olivier
> _______________________________________________
> dhcp-users mailing list
> dhcp-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/dhcp-users

_______________________________________________
dhcp-users mailing list
dhcp-users at lists.isc.org
https://lists.isc.org/mailman/listinfo/dhcp-users



More information about the dhcp-users mailing list