Novell ZENWORKS NETWORK ACCESS CONTROL 5.0 - 09-22-2008 User Manual page 105

To set DHCP enforcement:
Home window>>System configuration>>Quarantining>>DHCP quarantine method radio button
System Configuration, Quarantining, DHCP Enforcement
Figure 3-37
1 Inline DHCP server is selected by default. If you wish to use multiple DHCP servers, see the
instructions in Chapter 15, "DHCP Plug-in," on page
2 Select one of the following radio buttons:
Enforce DHCP requests from all IP addresses — Allows DHCP requests from all IP
addresses.
Restrict enforcement of DHCP requests to quarantine and non-quarantine subnets
— Specify individual DHCP relay agent IP addresses, separated by carriage returns in the
DHCP relay IP addresses to enforce text box.
These addresses must be a subset of either the quarantined or non-quarantined subnets.
This limits the enforcement scope to DHCP requests relayed via these IP addresses,
allowing you to restrict enforcement to only those DHCP requests which are forwarded
via particular routers or Layer 3 switches. If set, DHCP traffic coming from a source IP
not listed will be passed without intervention.
NOTE: Construction of the DHCP relay packet's source IP address is vendor-dependent.
Some implementations (for example, Extreme) use the IP address of the interface closest
to the DHCP server as the source IP for DHCP forwarding, which means the resultant
317.
System Configuration 105