02-19-2014 01:30 PM
To keep this short and sweet is there a way I can block a specific mac address from pulling an IP from our firewall's DHCP scope?
I want to see if the machine attempts to get an IP but I don't want that machine to get one. (We don't want to block at the switch or AP.)
02-19-2014 03:57 PM
This is not possible. The best you can do is use dhcp mac reservations to give this mac address a specific ip address every time.
Then write a rule to deny the traffic from this address.
How to Configure DHCP Reserved Addresses on a Palo Alto Networks Firewall
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
