Block users via DHCP

[chekmate1984]

Hi all

 

We have chromebook wifi password which our old IT guy put on nunmerous staf phones etc

 

I want to reverse that. I dont wish ti change password.

 

In DHCP i can see which phones or devices that are not chromebooks. Does right click those phones and change filter profile to deny stop them getting ip address?

 

As i have tried this, and the devices still seems tobe getting ip address.

 

I have tried my phone, change lease to 1 min to try and after min i still get dhcp ip and internet so the deny does nothing.

 

Any ideas?

 

Thanks

[bknaggs]

You could assign all the Chromebooks reservations and block any other IP addresses from being given out in this range. It won't stop somebody using a static IP but you could also set a firewall rule to block any device using an IP not in your range of reservations from accessing the internet.

[DalekSec]

How many is there? Could limit the SSID to certain MAC addresses and populate with the chromebooks

[cullingsh]

Have you enabled the Deny filter? In Microsoft DHCP management, go to the filters tab, deny list - right click and select enable?

[CHiLL]

Blocking by MAC addresses is more difficult these days with the rise of privatised/randomised MAC addresses, meaning a device can appear in DHCP with a different MAC address. You might just be best changing the password, despite the short term pain it would cause.

[LeMarchand]

If you can't do it in DHCP, you can probably do it via your wireless console. You definitely can with Unifi.

[Davit2005]

Create reservations that don't have a valid IP for the subnet?? Would that work or invalid gateway/DNS. Ideally you want to move away from shared passwords anyway.

[MatthewL]

What WiFi solution are you using?

 

Could you use PPSK create a few key, push this out to your devices and then retire the old one, keeping the same SSID but stopping users that you don't want access?