Blocking DHCP port

Follow

Jonathan Phan

• November 21, 2022 16:26

Is there a way that I can disallow newly connected WIFI devices from obtaining an IP address from my DHCP server?

Currently have the QUARANTINE group feature enabled; hence, all inbound/outbound network traffic is blocked until I release the device from QUARANTINE group.  However, my Firewalla discovers several devices and place them in QUARANTINE group, but when I try to figure out the origin of these devices, I cannot find them on my list of devices.

Please advise...

 

1

• 

  Firewalla

  • November 21, 2022 19:09

  This may be a new feature request. Is your problem not able to find the device, or what it is?

  0

  Comment actions Permalink
• 

  Jonathan Phan

  • November 22, 2022 13:27

  The problem that I have is I have unknown devices are connected to my WIFI network.  The firewall is doing a good job of blocking them from access local network and Internet.  However, it does not block new devices from obtaining an IP address from my DHCP server (which is a Windows Server).

  I believe that I should be able to create a group and members of this group cannot obtain an IP address from DHCP server.  I tried several things, including create a rule which prevent all traffic to/from the DHCP server but it does not work.

  1

  Comment actions Permalink
• 

  Bob O'Hara

  • November 22, 2022 18:43
  • Edited

  Do you have an open WiFi network that these unknown devices are joining? Or are these unknown devices using randomized MAC addresses and only appear to be unknown as they join your WPA2-protected WiFi network?

  0

  Comment actions Permalink
• 

  Nigel

  • October 31, 2023 14:58
  • Edited

  I have the same request.  I'd like to block my wifi satellites from obtaining a DHCP address from Firewalla - I've been fighting the DHCP between the Google Wifi and Firewalla.  This would be an exceptional bit of functionality.

  Note:  My devices have a static MAC address so this should be more straight forward.

   

  0

  Comment actions Permalink
• 

  Firewalla

  • October 31, 2023 15:42

  by "block" do you mean not having Firewalla issue an IP address? or do you want wifi to drop the device without connecting it?

  0

  Comment actions Permalink
• 

  Nigel

  • October 31, 2023 18:45

  Yes, block firewalla from issuing an IP Address.  Currently, my Google Wifi access points (not the main one that is hard wired) is getting an IP address from Firewalla - I want my Google Wifi access points (to get their IP from the Google Router (Main access point that is wired).
  
  NOTE:  Per your instructions on using Google Wifi Mesh with Firewall Purple - I setup a switch VLAN on my managed switch, lowered the DHCP IP Range to limit it to assign only my Wifi access points and one of them is still getting the Firewalla DHCP.   It's a cat and mouse process to shut off all wireless devices to only allow the Wifi access points to get the Google DHCP address so I'm hoping Firewall can block any DHCP assignments by MAC Address.  Hope that makes sense.

  0

  Comment actions Permalink
• 

  Firewalla

  • November 01, 2023 01:30

  If you tap on devices->[any device]-> then tap on IP address, you can pick "Do No Allocate."

  Is this what you are looking for?

   

  0

  Comment actions Permalink
• 

  Nigel

  • November 01, 2023 21:02

  Yes, exactly what I’m looking for but it’s doesn’t work. I tried this and restarted the device. Same up was assigned from Firewalla. Tried it again but removed the device from Firewalla afterward with the same result. What are your thoughts?

  0

  Comment actions Permalink
• 

  Firewalla

  • November 02, 2023 15:54

  @Nigel, if do not allocate does not work, it is a bug, I have created a ticket for you and we will follow up. 

   

  0

  Comment actions Permalink
• 

  Nigel

  • November 02, 2023 21:04

  Thanks! I don’t find bugs often…but when I do — I try to make them count :)

  0

  Comment actions Permalink
• 

  Nigel

  • January 02, 2024 19:51

  Will you provide the ticket to me please - I've had some issues getting the google wifi online and it's a very difficult process to resolve the issue.

  0

  Comment actions Permalink
• 

  Firewalla

  • January 02, 2024 23:57

  Nigel, your previous one expired, I just created you a new one. 

  0

  Comment actions Permalink

Please sign in to leave a comment.