Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

Blocking a MAC from getting IP from ASA DHCP

WE use ASA as remote VPN and use DHCP pool on this ASA. Is it possible to block a specific MAC from getting IP from this pool?

thanks,

Han

4 REPLIES

Blocking a MAC from getting IP from ASA DHCP

If you block it from getting DHCP from a pool then where do you want it to get an IP from? Another pool? Local?

Community Member

Blocking a MAC from getting IP from ASA DHCP

Collin,

We simply dont want it get to the VPN to the network. Any method that we can block this mac would be great, but login here is not an option.

thanks,

Han

Blocking a MAC from getting IP from ASA DHCP

Hmmmm, I guess what I would do is create a static reservation with an IP that's not valid, like 169.254.254.

Community Member

Re: Blocking a MAC from getting IP from ASA DHCP

How about creating an arp entry for the ip

For e.g. The ip is 1.1.1.1 on the inside with Mac address xxxx and 1.1.1.0/24 is the dhcp pool. You don't want to hand out 1.1.1.1 via dhcp

Then you add an entry

Arp inside 1.1.1.1 xxxx

So that Asa excludes 1.1.1.1 from being handed out via dhcp

Sent from Cisco Technical Support iPad App

467
Views
0
Helpful
4
Replies
CreatePlease to create content