From: Daxter Gulje (dgulje@housing.ucsb.edu)
Date: Sun Jan 27 2002 - 15:53:00 CST
It's like you read my mind...I *just* discovered that anomaly on
Friday afternoon, and man was it confusing me. I was able to locate the
student in the dhcpd.leases file, but an investigation into her computer
provided little information.
Thanks so much for the conf line, I'll be putting it into place
first thing tomorrow morning!
/Dax
______________________________
Daxter H. Gulje
Assistant ResNet Coordinator
University of California, Santa Barbara
805.893.4747
-----Original Message-----
From: Nick Ciesinski
Sent: Sat 1/26/2002 8:21 PM
To: netreg@southwestern.edu
Cc:
Subject: NetReg: Long Mac Addresses
Just a FYI.
We noticed a rather long mac address in our dhcp server logs
when
students came back from break. The mac was
"52:41:53:20:90:e4:9d:b9:24:9d:c0:01:01:00:00:00"
I questioned Peter if he had ever seen this and he said he
didn't and to
try the dhcp server mailing list. I tried the list and received
a
replay that this was the mac address of a Microsoft RAS server.
The
first part of the address "52:41:53:20" when converted to ASCII
spells
"RAS". It turned out that a student had a ras server running on
resnet.
When I told Peter of my findings he said to post it to the
NetReg list
and mention what I did to combat this problem. Unfortunately, I
was
unable to track the user down. It seems that the RAS server
gets an IP,
but unless the ras connection is active it doesn't use it. So I
have no
way of finding out who the student is. However, I did manage to
configure the dhcp server to not give a ras server any ip
addresses. To
do this you need to edit the dhcpd.conf file (or
dhcpd.conf.new).
You need to add the following code to the config file. It
should be
placed before the student host entries are made.
if substring (option dhcp-client-identifier, 1, 3) = "RAS" {
deny booting;
}
-OR-
if substring (option dhcp-client-identifier, 1, 3) = "RAS" {
ignore booting;
}
If you use "deny booting" the attempt to get a lease will be
logged. If
you use "ignore booting" the attempt will not be logged.
Hope this information will be of benefit so when you see a funny
looking
mac address in your logs you will know what it is.
Thanks,
Nick Ciesinski
University of Wisconsin - Whitewater
**********************************************************************
To unsubscribe from this list, send an e-mail message to
majordomo@southwestern.edu containing a single line with the
words:
unsubscribe netreg
Send requests for assistance to: owner-netreg@southwestern.edu
**********************************************************************
This archive was generated by hypermail 2.1.4 : Thu Aug 12 2004 - 12:01:36 CDT