Any way to delete a device that picked up a DHCP Leased Address?

[#1]

Hello All, Just a question, as I poked around for awhile and couldn' t find a quick way to do this. Have an unknown device plugged into a switch somewhere that has picked up a DHCP Address. Is there a way to ban / clear a particular device from the DHCP List of leases? Thanks.....Scott

[rwpatterson]

What is the ultimate goal? If it' s to make sure this device gets no access, set up a DHCP-MAC binding, and then use policies to deny it access. Once the unit has been bound, it can' t get out using that address or any other.

[ede_pfau]

For ease of use I usually bind rogue MAC addresses to otherwise unused and non-routed IP addresses like 192.168.253.253 or 9.8.7.6. As this network isn' t used anywhere in the config the default (implicit) firewall DENY policy will catch it eventually. Less effort to set up and remove later. Don' t forget to manually kill the existing lease - some culprits set up keepalive traffic to permanently renew the same (valid) IP address.

[emnoc]

Same here, but I like to use the experimental range. 192.0.1.0/24 or 1.1.1.0/24 none of these networks are routed on the internet.