<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Em 14-06-2012 04:04, Simon Hobson escreveu:
<blockquote cite="mid:p06240869cbff3c5f4b9c@simon.thehobsons.co.uk"
type="cite">Glenn Satchell wrote:
<br>
<blockquote type="cite">In that second pool you could have:
<br>
deny members of "classFirewallFullAccess";
<br>
rather than
<br>
deny unknown-clients;
<br>
<br>
and do away with the host statements. As it is you need to add
your
<br>
special hosts to a host statement *and* the subclass. Easier to
just do it
<br>
once.
<br>
</blockquote>
<br>
Actually, as I read it he's wanting to do something he never told
us about - like that's unusual in here!
<br>
<br>
Looks like he wants one subnet for stuff he knows about, with some
of those getting preferential treatment. And for anything else (ie
visitors etc) he wants to use a different subnet altogether.
<br>
So 3 choices.
<br>
</blockquote>
Yeah, 3 choices. Didn't mentioned the third one since it is damn
simple and trivial. Allow unknow-clientes. :)<br>
<br>
<blockquote cite="mid:p06240869cbff3c5f4b9c@simon.thehobsons.co.uk"
type="cite">
I'd be tempted to use two classes for known stuff rather than use
a class for the privileged and hosts for the rest which will make
it harder to maintain. In a DB you could keep a flag for which
class the device is, then just spit out a list of MACs and class
membership without having to have "if it's <something> then
make a subclass, else make a host statement" stuff.
<br>
</blockquote>
That is a KISS. Will do that when I get the time to automate it,
feed a DB with all hw addresses, etc but for now mixing hosts and
classes suffice. It is a small network anyway with only a couple
hundreds clients.<br>
<br>
BTW, is there how to make dhcpd read hosts/subclasses information
live from LDAP? :))) Or should I cron-dump it to a file?<br>
<br>
Thanks a lot for all help and best regards.<br>
<br>
<br>
<div class="moz-signature">-- <br>
<style type="text/css">
#a1AssinaturaEmail { font-family: Tahoma, Verdana, Arial; font-size: 10px; }
#a1AssinaturaEmail * { font-family: Tahoma, Verdana, Arial; font-size: 10px; }
#a1AssinaturaEmail a { text-decoration: none; color: #FF9900; }
</style>
<div id="a1AssinaturaEmail"> <span style="font-size: 12px;"><b>Marcio
Merlone</b></span><br>
</div>
</div>
</body>
</html>