DHCP SERVER + AUTH

[Josh Davis]

Hi all I was over on tech net where there is Q/A on 2003 server.

http://www.microsoft.com/technet/community/chats/trans/network/net1120.mspx

I found this link on the main page that talks about configuring the
DHCP server with a callout dll. This could be used I guess to hamper
the server from just blindly handing out dhcp leases.

here is the snip

Q: Is there any plans for adding limited DHCP based on a MAC Address
entry?

A: You can do this now, using reservations. However, if that isn't
flexible enough for you, can write a plug-in, called a Callout DLL,
that the DHCP Server can load. This plug-in can be used to affect the
processing of DHCP packets at various stages. One of the actions you
can take is to tell the DHCP Server to drop the packet. See
http://msdn.microsoft.com/library/en-us/dhcp/dhcp/dhcp_server_api.asp
for details on using this API.


? have any of you tried this or have such a dll. I am trying to lock
down the DHCP server from handing out leases to users/computer names
that are not in my access list.

It would be real nice if the dhcp server could access AD for
credentials, prior to handing out a lease.

Thanks Josh.

 

[Ryan Hanisco]

Why not do reservations for all of your known hosts and then make an
exclusion for all the unassigned addresses. This is far easier than the
CallOut.dll and would mean that someone other than you could administer
it -- you know, in case you were hit by a bus.

 

[Josh Davis]

Thanks for the suggestion, I could do as you suggest but was
looking for a method that did not envolve the hardcoding of mac
addresses.

I think a callout dll would be a whole lot more flexable but
cant semm to find any real world implementation of it anywhere.

I wonder if the gurus at MS have anything to offer.

Thanks . Josh.

 

[Guest]

Did you ever get a response regarding the DHCP Server Callout? I am starting