[Cialug] DHCP question - Vendor info.

Nathan C. Smith nathan.smith at ipmvs.com
Wed Aug 12 11:48:26 CDT 2009


Really?  So I was reading way too much into it? like it was sending a little more information somewhere else in the request.

-Nate 

> -----Original Message-----
> From: cialug-bounces at cialug.org 
> [mailto:cialug-bounces at cialug.org] On Behalf Of Josh More
> Sent: Wednesday, August 12, 2009 11:47 AM
> To: 'Central Iowa Linux Users Group'
> Subject: Re: [Cialug] DHCP question - Vendor info.
> 
> The vendor code is the first three bytes of the MAC address.
> 
>  
>  
> 
> -Josh More, RHCE, CISSP, NCLP, GIAC
>  morej at alliancetechnologies.net
>  515-245-7701
> 
> 
> 
> >>> "Nathan C. Smith" <nathan.smith at ipmvs.com> 8/12/2009 10:27 AM >>>
> 
> It is my understanding that when a system initiates a DHCP 
> request it sends along a special code for vendor information. 
>  In dhcpd, with use of a special conditional statement, you 
> are supposed to be able to assign addresses based on this 
> vendor specific information.
> 
> So my question is, short of actually sniffing the wire, is 
> there a way to get the vendor-code that is sent?  Could it be 
> located in a log file somewhere?  I don't see it in my DHCP 
> logs but maybe I need to enable more detail?  I've also 
> searched Google and found codes for some hardware and 
> different versions of Windows.
> 
> My issue is this: I use DHCPD to assign static IP addresses 
> based on all my known MAC addresses.  Any new addresses go 
> into a special range. 
> Between this special range and arpwatch I can see new devices 
> and unwelcome visitors on my network.  Since the VPN creates 
> a special MAC address for each connection the addresses 
> always go into the special range and create an arpwatch 
> alert.  I'd like to be able to use the vendor info to place 
> vpn users into a trusted range and really lock down the 
> untrusted or visitor range.
> 
> If anyone can shed more light on the vendor info field in a 
> DHCP request I would really appreciate it.  Thanks.
> 
> -Nate
> _______________________________________________
> Cialug mailing list
> Cialug at cialug.org
> http://cialug.org/mailman/listinfo/cialug
> 
> _______________________________________________
> Cialug mailing list
> Cialug at cialug.org
> http://cialug.org/mailman/listinfo/cialug
> 


More information about the Cialug mailing list