Skip to main content
Contributor III
July 28, 2011
Question

Any way to delete a device that picked up a DHCP Leased Address?

  • July 28, 2011
  • 3 replies
  • 4714 views
Hello All, Just a question, as I poked around for awhile and couldn' t find a quick way to do this. Have an unknown device plugged into a switch somewhere that has picked up a DHCP Address. Is there a way to ban / clear a particular device from the DHCP List of leases? Thanks.....Scott

    3 replies

    rwpatterson
    New Member
    July 29, 2011
    What is the ultimate goal? If it' s to make sure this device gets no access, set up a DHCP-MAC binding, and then use policies to deny it access. Once the unit has been bound, it can' t get out using that address or any other.
    ede_pfau
    SuperUser
    SuperUser
    July 29, 2011
    For ease of use I usually bind rogue MAC addresses to otherwise unused and non-routed IP addresses like 192.168.253.253 or 9.8.7.6. As this network isn' t used anywhere in the config the default (implicit) firewall DENY policy will catch it eventually. Less effort to set up and remove later. Don' t forget to manually kill the existing lease - some culprits set up keepalive traffic to permanently renew the same (valid) IP address.
    emnoc
    New Member
    July 29, 2011
    Same here, but I like to use the experimental range. 192.0.1.0/24 or 1.1.1.0/24 none of these networks are routed on the internet.