Request for feature

[ngtech]

I would like to request to add a feature so that I can choose to allow only DHCP users to access to internet.

I am having problem currently that I control internet access by IP & the users are able to change to IP that got internet access.

[adrien]

Hi

You can already do that.

In your system policies require that the user is a DHCP client.

in the advanced tab, it's under "Client is a DHCP client"

Adrien

[ngtech]

Hi Adrien,
According to Jamesc.

Client is a DHCP Client = True.

This is based off what IP Addresses have been previously distributed by WinGate’s DHCP Server; not who it had been distributed to.

Pls.. I need this feature quite badly. I just registered my copy of Wingate.

http://forums.qbik.com/viewtopic.php?t=5056

[adrien]

Hi

that's the same thing.

As far as Wingate is concerned, if it assigned an IP address by DHCP then that IP address belongs to a DHCP client.

It's not bulletproof, i.e. if people change their IP manually etc, but there's no other way WinGate can tell if something is using DHCP or not.

Adrien

[ngtech]

This is a bad news for me but.. thanks anyway..

Hi

that's the same thing.

As far as Wingate is concerned, if it assigned an IP address by DHCP then that IP address belongs to a DHCP client.

It's not bulletproof, i.e. if people change their IP manually etc, but there's no other way WinGate can tell if something is using DHCP or not.

Adrien

[adrien]

What problem are you trying to address? There may be another way around it.

Adrien

[ngtech]

Hi Adrien,
I am using IP to decide who can access to internet. So I want to make sure they change themselves won't work.

What problem are you trying to address? There may be another way around it.

Adrien

[adrien]

Hi

There are commonly problems with using just IP address to base access control on.

Since you can't really stop users from going into their TCP/IP config and changing their IP to use a fixed address..

If they pick an address that is the same as someone else on the network, there will be a conflict, so that won't really work for them. If they pick an IP address that WinGate hasn't allocated by DHCP, then you can have WinGate deny that as well.

Otherwise you need to set up the client machines so the users don't have access to TCP/IP properties.

Or you could use the WinGate Client, or authentication on the server?

[adrien]

PS, did you try the policy option "Client is DHCP client"?

Adrien

[ngtech]

Hi Adrien,
there is time when the internet access PC shutdown.

I try to set in the way that authorized pc can surf right away without need to go over to the client pc for configuration.

Hi
If they pick an address that is the same as someone else on the network, there will be a conflict, so that won't really work for them. If they pick an IP address that WinGate hasn't allocated by DHCP, then you can have WinGate deny that as well.

Or you could use the WinGate Client, or authentication on the server?

[ngtech]

Yeah.. I tried. Any pc with the internet IP can surf the net until the IP expired which I set it for 15 days.

PS, did you try the policy option "Client is DHCP client"?

Adrien

[adrien]

Yeah.. I tried. Any pc with the internet IP can surf the net until the IP expired which I set it for 15 days.

PS, did you try the policy option "Client is DHCP client"?

Adrien

So you mean some other machine changes their IP to the same one that was assigned by DHCP to another machine in order to get access?

Are your clients on the Internet, or your local network?

If they are on your local network, you could use something like a MAC address filter, but it's not very well supported in this version of WinGate.

Otherwise, if you are using the windows user database and the wingate client, they should automatically log in without requiring the user to enter username and password.

Adrien

[ngtech]

Hi Adrien,
Really appreciate your prompt reply. I think worst come to worst. I will go for the MAC address control. I wish Wingate might able to figure out how to implement this feature in the future. Thanks a lot.

So you mean some other machine changes their IP to the same one that was assigned by DHCP to another machine in order to get access?

Are your clients on the Internet, or your local network?

If they are on your local network, you could use something like a MAC address filter, but it's not very well supported in this version of WinGate.

Otherwise, if you are using the windows user database and the wingate client, they should automatically log in without requiring the user to enter username and password.

Adrien