I have a dhcp server with static leases for my clients. How to block clients that doesn’t use dhcp and have statically configured ip addresses ?
Piotr
set arp mode on the interface to the reply-only
If I set arp mode to reply-only my dhcp clients don’t work as well - should I add any static arps ?
no, you should configure dhcp server accordingly (this configuration is only valid if the dhcp server and the gateway are in fact one machine; we will have to think of something else if this is not the case). i think there is a config option for dhcp server to add arp entries automatically for each client (at least there was, when i last checked)
Ok, I just needed to set “add-arp for leases” option in dhcp-server.
But I also have couple of static ip addresses on that interface, I added them manually to arp table and they still doesn’t work. Now only dynamically added arps work. Why is that ?
My interface is VLAN if that’s any difference.