USG310 - WORKSTATION - IDENTIFICATION FOR DHCP WITH DYNAMIC IP ASSIGNMENT

Przemek
Przemek Posts: 28  Freshman Member
First Comment Friend Collector Fifth Anniversary
edited April 2021 in Security

I want to analyze data about single workstation activity.

Is there any way for workstation in network identification with dynamic ip assignment from dhcp server.

Is there MAC/User or HOSTNAME/MAC binding option and identify traffic for this kind of records?

All Replies

  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,511  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments

    Hi @Przemek

    You can use DHCP static MAC binding on USG, Workstation will get the same IP address from DHCP server every time.

    In this way, all the traffic/log/activity from this IP can be identified for analyzing.

    DHCP static binding at “CONFIGURATION > Network > Interface > Ethernet DHCP Setting > “Static DHCP Table””

    image.png


  • Przemek
    Przemek Posts: 28  Freshman Member
    First Comment Friend Collector Fifth Anniversary

    Hi Zyxel_Cooldia

    I have some external locations with different subnets with local dynamic DHCP servers connected as internal network with me by external VPN and all Internet is provided by Zywall in my location. What will happen if I turn on "Enable IP/MAC Binding" ? Will it block access for all addresess with wrong IP/MAC pair or without records in STATIC DHCP table?

  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,511  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments
    edited September 2019

    Hi @Przemek ,

    It would not block the traffic without records in STATIC DHCP table.

    Enable this option to have this interface enforce links between specific IP addresses and specific MAC addresses.

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）