How do I block MAC addresses from my DHCP server?

Learn how to block MAC addresses on your network from getting any IP addresses off your DHCP server, in this expert response with security expert Puneet Mehta.

How do I block a MAC address on my network so that a PC with that particular MAC address cannot get any IP address...

from my DHCP server?

You can do it in two ways:

  1. If you know the number of PC's on your network, then force MAC binding in DHCP and limit the range of available IP's in your DHCP to the number of PC's on your network. This way there will be no free IP's available for the DHCP to assign to a new PC that comes online. Of course, you will have exclusion range for your servers configured already.
  2. The best solution is to use NAC -- a network access control product. The one that is available, free and works great is Packetfence. It's an open source distribution and does a lot more than just problem solve a DHCP. You can download this from the Sourceforge site.
Hope this helps.

This was first published in May 2007

Dig Deeper on Network Access Control



Find more PRO+ content and other member only offers, here.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

1 comment


Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: