Able to block RAS at DHCP server?

[kythri]

We've got a few vendor-supplied machines that we can't eliminate, and we can't get them to disable RAS on these boxes.

As such, we're dealing with these systems grabbing addresses in our DHCP scopes.

Is there a way to block this at the DHCP server, or perhaps another level, that doesn't require us to disable RAS on the server itself?

 

[Lemon13]

http://www.petri.co.il/filter-mac-address-windows-server-2008-dhcp-server-callout-dll.htm

M. Knorr

MCSE, MCTS, MCSA, CCNA

 

[kythri]

That seems to be a MAC filter - the RAS addresses don't have a MAC, their "unique ID" is "RAS".

Further, I can't install anything on the DHCP server at this time.

I was hoping for some internal functionality that allows this - it's completely ridiculous that one entity could setup RAS services in my environment, and short of killing all access to that RAS server at the network level, I can't prevent the RAS access, such as not allowing DHCP leases at the server for it.

Sadly, this seems to be more ammo for going with a Bluecat or Infoblox solution...

 

[dberg35]

If these machines are authenticating to the domain via RAS then isn't there user accounts assigned as well? Also why not assign a false static IP? If you want the MAC address then look at pingtesteasy at download.com. This is free and can scan the network for all IP's which also shows the MAC.

 

[kythri]

They're not domain machines.