Novell ZENworks Network Access Control 5.0, Руководство пользователя

Страница: 105 / 534

System Configuration 105
no
vd
ocx
(e
n)
24
Ma
rch 20
09
To set DHCP enforcement:
Home window>>System configuration>>Quarantining>>DHCP quarantine method radio button
Figure 3-37
System Configuration, Quarantining, DHCP Enforcement
1 Inline DHCP server is selected by default. If you wish to use multiple DHCP servers, see the
instructions in
Chapter 15, “DHCP Plug-in,” on page 317 .
2 Select one of the following radio buttons:
Š Enforce DHCP requests from all IP addresses — Allows DHCP requests from all IP
addresses.
Š
Restrict enforcement of DHCP requests to quarantine and non-quarantine subnets
— Specify individual DHCP relay agent IP addresses, separated by carriage returns in the
DHCP relay IP addresses to enforce
text box.
These addresses must be a subset of either the quarantined or non-quarantined subnets.
This limits the enforcement scope to DHCP requests relayed via these IP addresses,
allowing you to restrict enforcement to only those DHCP requests which are forwarded
via particular routers or Layer 3 switches. If set, DHCP traffic coming from a source IP
not listed will be passed without intervention.
NOTE: Construction of the DHCP relay packet's source IP address is vendor-dependent.
Some implementations (for example, Extreme) use the IP address of the interface closest
to the DHCP server as the source IP for DHCP forwarding, which means the resultant