«

Hi,

Is it possible to restrict the DHCP server functionality of a 6500 (running
native) to particular ports only? I have a couple of VLANs that use a
stand-alone DHCP server through way of ip helper-address, but I want to use
the switch as a DHCP server for a few machines connected to certain ports.

The reason for this is that machines connected at a particular set of desks
used by visitors need to use one of a particular range of addresses.
Currently, they have to manually set the address, but it would be much
easier for them if the switch could could assign them one. I can not create
static mappings on the stand-alone DHCP server because the MAC addresses
will change frequently as different visitors come and go.

Regards,
Roy.

Heya Roy,

Nope, can't do by way of restricting ports.

What you should do is simply create another vlan with an acl on that
interface only allowing them what you want them to access. You would
obviuosly need to create another scope on your dhcp server for the "guest
vlan". Very very common practice to have it done that way.

Good luck!
-Brian
"Roy Weekes" <> wrote in message
news:c68nhs$g5o$1$...
> Hi,
>
> Is it possible to restrict the DHCP server functionality of a 6500
(running
> native) to particular ports only? I have a couple of VLANs that use a
> stand-alone DHCP server through way of ip helper-address, but I want to
use
> the switch as a DHCP server for a few machines connected to certain ports.
>
> The reason for this is that machines connected at a particular set of
desks
> used by visitors need to use one of a particular range of addresses.
> Currently, they have to manually set the address, but it would be much
> easier for them if the switch could could assign them one. I can not
create
> static mappings on the stand-alone DHCP server because the MAC addresses
> will change frequently as different visitors come and go.
>
> Regards,
> Roy.
>
>

Yep. Put them in another VLAN and secure with access-lists.
You can then make the 6500 a DHCP server for this vlan, or use the
coorporate DHCP server using ip helper-address.

1) This will only work if you C6500 has routing capability....of you
will have to put another router in....

Regards,
Geert

Brian V wrote:

> Heya Roy,
>
> Nope, can't do by way of restricting ports.
>
> What you should do is simply create another vlan with an acl on that
> interface only allowing them what you want them to access. You would
> obviuosly need to create another scope on your dhcp server for the "guest
> vlan". Very very common practice to have it done that way.
>
> Good luck!
> -Brian
> "Roy Weekes" <> wrote in message
> news:c68nhs$g5o$1$...
>
>>Hi,
>>
>>Is it possible to restrict the DHCP server functionality of a 6500
>
> (running
>
>>native) to particular ports only? I have a couple of VLANs that use a
>>stand-alone DHCP server through way of ip helper-address, but I want to
>
> use
>
>>the switch as a DHCP server for a few machines connected to certain ports.
>>
>>The reason for this is that machines connected at a particular set of
>
> desks
>
>>used by visitors need to use one of a particular range of addresses.
>>Currently, they have to manually set the address, but it would be much
>>easier for them if the switch could could assign them one. I can not
>
> create
>
>>static mappings on the stand-alone DHCP server because the MAC addresses
>>will change frequently as different visitors come and go.
>>
>>Regards,
>>Roy.
>>
>>
>
>
>