How to justify static IP

[ktai]

Hello,
I have a dilema. Last year, we switched from DHCP to static IP addresses in a 700+ user high school environment. The problem is that the kids (who are required to have a personal laptop at school with our network settings) are complaining because they have to keep switching back and forth from DHCP to static IP in order for them to have internet access at home. They do not understand that we need static IP addresses for our content filtering. In the past, we had this one student who was visiting inappropriate sites and when we confronted her and her parents, they all denied it because we had no proof that the DHCP address was indeed hers. How can I justify this switch to our upset faculty and angry parents?

 

[Sympology]

There is no need at all for Statics. No idea why it should be used for content filtering. The DHCP is assigned to a MAC address so all it takes it see what mac was assigned to what machine name / ip address / user.
On windows you can look in the DHCP scope on the DC or just do an
NBTSTAT -a xxx.xxx.xxx.xxx (ip adress) from you pc and there is your info.
Also why not set up DHCP reservations instead of static, that way the pc pick up the same address everytime.
To be honest whoever came up with the idea of static, needs to go on an basic Network admin course

Stu..

Only the truly stupid believe they know everything.
Stu.. 2004

 

[Auger282]

we are forced to do static in our corp world.. HOWEVER the way we found around it is a giant database of DHCP reservations (I know it sounds like a nightmare) but its not that bad...

...the alternative is on laptops typically you can setup a secondary address.

let me explain.. its a fail over static address that kicks in if the adapter doesnt get assigned a dhcp address..

so at home they would grab an address.. and at school (it takes a few seconds) but eventually it kicks in and it works like charm.. take a look into it..

third idea is being tricky
if you allow open dhcp but have your proxy pointing it straight to the bitbucket.. then when you change it to reserve then you can point it in the correct direction in your proxy or whatever... different pools or network schemes.. whatever

tricky = feather in cap

------
| |
| |
------
theres the box..

 

[Auger282]

ps.. turn logging on your dhcp server.. it can keep a log of exact times and macs that had the address "checked out" at that time.

we use websense combined with microsoft dhcp

websense is amazing and tracks everything down to the time and address.. granted in our environment we can easily track it down due to our psudo dhcp.. but it would be just as easy due to the logging that we are (groan) mandated to have..


btw its your network
kick some kids butts and take names