USG310 - WORKSTATION - IDENTIFICATION FOR DHCP WITH DYNAMIC IP ASSIGNMENT

Options
Przemek
Przemek Posts: 28  Freshman Member
First Anniversary 10 Comments Friend Collector
edited April 2021 in Security

I want to analyze data about single workstation activity.

Is there any way for workstation in network identification with dynamic ip assignment from dhcp server.

Is there MAC/User or HOSTNAME/MAC binding option and identify traffic for this kind of records?

All Replies

  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,450  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    Hi @Przemek

    You can use DHCP static MAC binding on USG, Workstation will get the same IP address from DHCP server every time.

    In this way, all the traffic/log/activity from this IP can be identified for analyzing.

    DHCP static binding at “CONFIGURATION > Network > Interface > Ethernet DHCP Setting > “Static DHCP Table””


  • Przemek
    Przemek Posts: 28  Freshman Member
    First Anniversary 10 Comments Friend Collector
    Options

    Hi Zyxel_Cooldia

    I have some external locations with different subnets with local dynamic DHCP servers connected as internal network with me by external VPN and all Internet is provided by Zywall in my location. What will happen if I turn on "Enable IP/MAC Binding" ? Will it block access for all addresess with wrong IP/MAC pair or without records in STATIC DHCP table?

  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,450  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    edited September 2019
    Options

    Hi @Przemek ,

    It would not block the traffic without records in STATIC DHCP table.

    Enable this option to have this interface enforce links between specific IP addresses and specific MAC addresses.

Security Highlight