classify by MAC address

Simon Hobson dhcp1 at thehobsons.co.uk
Fri Jan 20 17:16:37 UTC 2012


Ruzsinszky Attila wrote:

>         pool {
>             allow members of "KVM-vms";
>             range 192.168.52.180 192.168.52.199;
>             deny members of "VBox-vms";
>             deny members of "VMware-vms";
>             deny unknown-clients;
>             }

Don't mix allow and deny, it doesn't work as you might expect. 
Whenever you allow something, it implicitly denies anything that 
doesn't match - and vice-versa.

So what you want is just :

         pool {
             allow members of "KVM-vms";
             range 192.168.52.180 192.168.52.199;
             }

If something is a member of KVM-vms then it will be allowed, 
otherwise it won't. That should deal with 52:54:00:03:5d:62



         pool {
             range 192.168.52.21 192.168.52.29;
             deny members of "KVM-vms";
             deny members of "VBox-vms";
             deny members of "VMware-vms";
             }

is fine - all you have there are deny statements. If a client is a 
member of any of the three classes then it will be denied access to 
the pool.
I don't know why 6e:81:65:bd:6c:99 is being denied though - are there 
actually any free leases in that pool ?

-- 
Simon Hobson

Visit http://www.magpiesnestpublishing.co.uk/ for books by acclaimed
author Gladys Hobson. Novels - poetry - short stories - ideal as
Christmas stocking fillers. Some available as e-books.



More information about the dhcp-users mailing list