Link Layer Based Filtering?

re: Link Layer Based Filtering?

Stephen — Sun, 21 Oct 2012 19:53:25 GMT

Nevermind! Found my answer: technet.microsoft.com/.../ff521761.aspx

re: Link Layer Based Filtering?

Stephen — Sun, 21 Oct 2012 19:46:42 GMT

You say the deny list takes precedence? I want to deny all mac addresses except for those I explicitly allow. I thought this would be accomplished by adding * to the deny list and adding the individual addresses to the allow list, but if the deny list takes precedence then it would seem that even the allowed devices would be blocked. Obviously I'm not understanding something here. Help?

re: Link Layer Based Filtering?

teamdhcp — Thu, 10 Sep 2009 13:18:35 GMT

We have had questions asked of us on the impact of the link layer filtering (aka MAC address based filtering)on the DHCP server performance.

Based on the testing conducted for measuring impact of MAC address based filtering on performance, we have found negligible performance drop with MAC address based filtering configured.

With 100,000 MAC addresses configured (50,000 each in allow and deny list), the drop in average response time was to the order of 1-2% across multiple test runs.

Prasad

re: Link Layer Based Filtering?

teamdhcp — Fri, 03 Jul 2009 06:27:53 GMT

Hello Bruce,

If I understand your concern correctly, you need to have link layer filtering or MAC based filtering in previous version of Windows OS.

We had been supporting this through our callout dll, please check the following link if it suffices your requirements.

http://blogs.technet.com/teamdhcp/archive/2007/10/03/dhcp-server-callout-dll-for-mac-address-based-filtering.aspx

Thanks,

Subhash Badri

Admin

Bruce — Thu, 02 Jul 2009 18:34:21 GMT

I have not seen the DHCP Security change feature yet and was wondering if there is a download for the DHCP module so that it can be used on all of the Windows 2000, 2003 and 2008 Non-R2 servers. If you have a small business you may not have the budget to upgrade the entire server platform to 2008R2, so what is Microsoft doing to help these types of customers? It would seem Microsoft should provide this to help follow the Presidents lead on Cybersecurity http://www.whitehouse.gov/the_press_office/Statement-by-the-President-on-the-White-House-Organization-for-Homeland-Security-and-Counterterrorism/

Can anyone tell me if there is a DHCP update for these other platforms that allows an Administrator a way to control which MAC addresses get on your network? I would hope it has a MAC request window to allow the network administrator to see all of the requesting MAC ID’s in a simple window which would have an option to provide a Security ADMIN to allow Once or Allow Permanent Access, Decline Access by the requesting MAC ID selected in the window by an Admin.

DHCP Server Callout DLL for MAC Address based filtering

Microsoft Windows DHCP Team Blog — Wed, 01 Apr 2009 12:27:02 GMT

DHCP Server team is excited to announce that the much appreciated and loved feature, MAC Address based

DHCP Server Events Tool

Microsoft Windows DHCP Team Blog — Fri, 20 Mar 2009 15:40:01 GMT

This tool can be used by DHCP Administrators to view all the events generated by Windows DHCP Server

re: Link Layer Based Filtering?

teamdhcp — Tue, 17 Mar 2009 17:13:26 GMT

Hey Pete,

In case you were using the MacFilterCallout dll and you have the Maclist.txt file with you, you can use the following tool to import the entries in WS08 R2 DHCP Server:

http://blogs.technet.com/teamdhcp/archive/2009/02/16/mac-filter-import-tool.aspx

Or else,

the DHCP MMC in WS08 R2 also supports converting active lease to filters.

Hopefully this would make your job easier.

Thanks

Raunak Pandya

DHCP Server Team

re: Link Layer Based Filtering?

Pete — Tue, 17 Mar 2009 16:53:24 GMT

Is there a way of importing a list of MAC addresses into the 2008 R2 DHCP server. I cannot find the MAClist file that there was on the Windows 2003 server version and I have about 800 addresses to be added to the ALLOWED list.

Thanks

Pete

MAC Filter Import Tool

Microsoft Windows DHCP Team Blog — Mon, 16 Feb 2009 17:02:06 GMT

Hello Everybody, Thanks for all those who tried the MacFilterCallout dll . As you all must have checked