Office Mode: Algorithm behind "Unique per machine" (MAC address for DHCP allocation)

[#1]

Hi,

for special internal reasons we currently use "Calculate per user name", whit this the algorithm is clear:
Take the <username> make MD5 hash and the first 12 chars is the MAC used for DHCP requests.

Example:

• User: sascha
• MD5: a624a33f3501afdc109103d1bdf80840
• MAC: A6-24-A3-3F-35-01

This gives us the opportunity to set static DHCP entries for every user.

Now we think about to give static VPN-IPs via DHCP to any connecting machine.
But we need to know the calculated MAC address before user connects.
Tried with 3 different machines and got those MAC addresses

• 5f:38:13:5c:cd:d9
• 9d:7b:a3:b6:d3:61
• aa:7c:47:4a:f3:bc

I have no Idea how those MACs where calculated.
Any hints from you?

Thanks and best regards,
Sascha

[#2]

Hi,

for special internal reasons we currently use "Calculate per user name", whit this the algorithm is clear:
Take the <username> make MD5 hash and the first 12 chars is the MAC used for DHCP requests.

Example:

• User: sascha
• MD5: a624a33f3501afdc109103d1bdf80840
• MAC: A6-24-A3-3F-35-01

This gives us the opportunity to set static DHCP entries for every user.

Now we think about to give static VPN-IPs via DHCP to any connecting machine.
But we need to know the calculated MAC address before user connects.
Tried with 3 different machines and got those MAC addresses

• 5f:38:13:5c:cd:d9
• 9d:7b:a3:b6:d3:61
• aa:7c:47:4a:f3:bc

I have no Idea how those MACs where calculated.
Any hints from you?

Thanks and best regards,
Sascha

[#3]

Hi,

for special internal reasons we currently use "Calculate per user name", whit this the algorithm is clear:
Take the <username> make MD5 hash and the first 12 chars is the MAC used for DHCP requests.

Example:

• User: sascha
• MD5: a624a33f3501afdc109103d1bdf80840
• MAC: A6-24-A3-3F-35-01

This gives us the opportunity to set static DHCP entries for every user.

Now we think about to give static VPN-IPs via DHCP to any connecting machine.
But we need to know the calculated MAC address before user connects.
Tried with 3 different machines and got those MAC addresses

• 5f:38:13:5c:cd:d9
• 9d:7b:a3:b6:d3:61
• aa:7c:47:4a:f3:bc

I have no Idea how those MACs where calculated.
Any hints from you?

Thanks and best regards,
Sascha

[#4]

Hi,

for special internal reasons we currently use "Calculate per user name", whit this the algorithm is clear:
Take the <username> make MD5 hash and the first 12 chars is the MAC used for DHCP requests.

Example:

• User: sascha
• MD5: a624a33f3501afdc109103d1bdf80840
• MAC: A6-24-A3-3F-35-01

This gives us the opportunity to set static DHCP entries for every user.

Now we think about to give static VPN-IPs via DHCP to any connecting machine.
But we need to know the calculated MAC address before user connects.
Tried with 3 different machines and got those MAC addresses

• 5f:38:13:5c:cd:d9
• 9d:7b:a3:b6:d3:61
• aa:7c:47:4a:f3:bc

I have no Idea how those MACs where calculated.
Any hints from you?

Thanks and best regards,
Sascha

[#5]

Hi,

for special internal reasons we currently use "Calculate per user name", whit this the algorithm is clear:
Take the <username> make MD5 hash and the first 12 chars is the MAC used for DHCP requests.

Example:

• User: sascha
• MD5: a624a33f3501afdc109103d1bdf80840
• MAC: A6-24-A3-3F-35-01

This gives us the opportunity to set static DHCP entries for every user.

Now we think about to give static VPN-IPs via DHCP to any connecting machine.
But we need to know the calculated MAC address before user connects.
Tried with 3 different machines and got those MAC addresses

• 5f:38:13:5c:cd:d9
• 9d:7b:a3:b6:d3:61
• aa:7c:47:4a:f3:bc

I have no Idea how those MACs where calculated.
Any hints from you?

Thanks and best regards,
Sascha

[#6]

Hi,

for special internal reasons we currently use "Calculate per user name", whit this the algorithm is clear:
Take the <username> make MD5 hash and the first 12 chars is the MAC used for DHCP requests.

Example:

• User: sascha
• MD5: a624a33f3501afdc109103d1bdf80840
• MAC: A6-24-A3-3F-35-01

This gives us the opportunity to set static DHCP entries for every user.

Now we think about to give static VPN-IPs via DHCP to any connecting machine.
But we need to know the calculated MAC address before user connects.
Tried with 3 different machines and got those MAC addresses

• 5f:38:13:5c:cd:d9
• 9d:7b:a3:b6:d3:61
• aa:7c:47:4a:f3:bc

I have no Idea how those MACs where calculated.
Any hints from you?

Thanks and best regards,
Sascha

[#7]

Hi,

for special internal reasons we currently use "Calculate per user name", whit this the algorithm is clear:
Take the <username> make MD5 hash and the first 12 chars is the MAC used for DHCP requests.

Example:

• User: sascha
• MD5: a624a33f3501afdc109103d1bdf80840
• MAC: A6-24-A3-3F-35-01

This gives us the opportunity to set static DHCP entries for every user.

Now we think about to give static VPN-IPs via DHCP to any connecting machine.
But we need to know the calculated MAC address before user connects.
Tried with 3 different machines and got those MAC addresses

• 5f:38:13:5c:cd:d9
• 9d:7b:a3:b6:d3:61
• aa:7c:47:4a:f3:bc

I have no Idea how those MACs where calculated.
Any hints from you?

Thanks and best regards,
Sascha

[#8]

Hi,

for special internal reasons we currently use "Calculate per user name", whit this the algorithm is clear:
Take the <username> make MD5 hash and the first 12 chars is the MAC used for DHCP requests.

Example:

• User: sascha
• MD5: a624a33f3501afdc109103d1bdf80840
• MAC: A6-24-A3-3F-35-01

This gives us the opportunity to set static DHCP entries for every user.

Now we think about to give static VPN-IPs via DHCP to any connecting machine.
But we need to know the calculated MAC address before user connects.
Tried with 3 different machines and got those MAC addresses

• 5f:38:13:5c:cd:d9
• 9d:7b:a3:b6:d3:61
• aa:7c:47:4a:f3:bc

I have no Idea how those MACs where calculated.
Any hints from you?

Thanks and best regards,
Sascha

[#9]

Hi,

for special internal reasons we currently use "Calculate per user name", whit this the algorithm is clear:
Take the <username> make MD5 hash and the first 12 chars is the MAC used for DHCP requests.

Example:

• User: sascha
• MD5: a624a33f3501afdc109103d1bdf80840
• MAC: A6-24-A3-3F-35-01

This gives us the opportunity to set static DHCP entries for every user.

Now we think about to give static VPN-IPs via DHCP to any connecting machine.
But we need to know the calculated MAC address before user connects.
Tried with 3 different machines and got those MAC addresses

• 5f:38:13:5c:cd:d9
• 9d:7b:a3:b6:d3:61
• aa:7c:47:4a:f3:bc

I have no Idea how those MACs where calculated.
Any hints from you?

Thanks and best regards,
Sascha

[#10]

Hi,

for special internal reasons we currently use "Calculate per user name", whit this the algorithm is clear:
Take the <username> make MD5 hash and the first 12 chars is the MAC used for DHCP requests.

Example:

• User: sascha
• MD5: a624a33f3501afdc109103d1bdf80840
• MAC: A6-24-A3-3F-35-01

This gives us the opportunity to set static DHCP entries for every user.

Now we think about to give static VPN-IPs via DHCP to any connecting machine.
But we need to know the calculated MAC address before user connects.
Tried with 3 different machines and got those MAC addresses

• 5f:38:13:5c:cd:d9
• 9d:7b:a3:b6:d3:61
• aa:7c:47:4a:f3:bc

I have no Idea how those MACs where calculated.
Any hints from you?

Thanks and best regards,
Sascha

[#11]

Hi,

for special internal reasons we currently use "Calculate per user name", whit this the algorithm is clear:
Take the <username> make MD5 hash and the first 12 chars is the MAC used for DHCP requests.

Example:

• User: sascha
• MD5: a624a33f3501afdc109103d1bdf80840
• MAC: A6-24-A3-3F-35-01

This gives us the opportunity to set static DHCP entries for every user.

Now we think about to give static VPN-IPs via DHCP to any connecting machine.
But we need to know the calculated MAC address before user connects.
Tried with 3 different machines and got those MAC addresses

• 5f:38:13:5c:cd:d9
• 9d:7b:a3:b6:d3:61
• aa:7c:47:4a:f3:bc

I have no Idea how those MACs where calculated.
Any hints from you?

Thanks and best regards,
Sascha

[#12]

Hi,

for special internal reasons we currently use "Calculate per user name", whit this the algorithm is clear:
Take the <username> make MD5 hash and the first 12 chars is the MAC used for DHCP requests.

Example:

• User: sascha
• MD5: a624a33f3501afdc109103d1bdf80840
• MAC: A6-24-A3-3F-35-01

This gives us the opportunity to set static DHCP entries for every user.

Now we think about to give static VPN-IPs via DHCP to any connecting machine.
But we need to know the calculated MAC address before user connects.
Tried with 3 different machines and got those MAC addresses

• 5f:38:13:5c:cd:d9
• 9d:7b:a3:b6:d3:61
• aa:7c:47:4a:f3:bc

I have no Idea how those MACs where calculated.
Any hints from you?

Thanks and best regards,
Sascha

[#13]

Hi,

for special internal reasons we currently use "Calculate per user name", whit this the algorithm is clear:
Take the <username> make MD5 hash and the first 12 chars is the MAC used for DHCP requests.

Example:

• User: sascha
• MD5: a624a33f3501afdc109103d1bdf80840
• MAC: A6-24-A3-3F-35-01

This gives us the opportunity to set static DHCP entries for every user.

Now we think about to give static VPN-IPs via DHCP to any connecting machine.
But we need to know the calculated MAC address before user connects.
Tried with 3 different machines and got those MAC addresses

• 5f:38:13:5c:cd:d9
• 9d:7b:a3:b6:d3:61
• aa:7c:47:4a:f3:bc

I have no Idea how those MACs where calculated.
Any hints from you?

Thanks and best regards,
Sascha

[#14]

Hi,

for special internal reasons we currently use "Calculate per user name", whit this the algorithm is clear:
Take the <username> make MD5 hash and the first 12 chars is the MAC used for DHCP requests.

Example:

• User: sascha
• MD5: a624a33f3501afdc109103d1bdf80840
• MAC: A6-24-A3-3F-35-01

This gives us the opportunity to set static DHCP entries for every user.

Now we think about to give static VPN-IPs via DHCP to any connecting machine.
But we need to know the calculated MAC address before user connects.
Tried with 3 different machines and got those MAC addresses

• 5f:38:13:5c:cd:d9
• 9d:7b:a3:b6:d3:61
• aa:7c:47:4a:f3:bc

I have no Idea how those MACs where calculated.
Any hints from you?

Thanks and best regards,
Sascha

[#15]

Hi,

for special internal reasons we currently use "Calculate per user name", whit this the algorithm is clear:
Take the <username> make MD5 hash and the first 12 chars is the MAC used for DHCP requests.

Example:

• User: sascha
• MD5: a624a33f3501afdc109103d1bdf80840
• MAC: A6-24-A3-3F-35-01

This gives us the opportunity to set static DHCP entries for every user.

Now we think about to give static VPN-IPs via DHCP to any connecting machine.
But we need to know the calculated MAC address before user connects.
Tried with 3 different machines and got those MAC addresses

• 5f:38:13:5c:cd:d9
• 9d:7b:a3:b6:d3:61
• aa:7c:47:4a:f3:bc

I have no Idea how those MACs where calculated.
Any hints from you?

Thanks and best regards,
Sascha

[DexMorgan]

Thanks for the answer. Our task is to separate the domain work laptops that connect to the network via VPN, and other home machines that also connect via VPN. We thought to solve it through a dhcp server, but today I realized that this can be achieved with much less effort through Identity Awareness.

[DexMorgan]

Thanks for the answer. Our task is to separate the domain work laptops that connect to the network via VPN, and other home machines that also connect via VPN. We thought to solve it through a dhcp server, but today I realized that this can be achieved with much less effort through Identity Awareness.

[DexMorgan]

Thanks for the answer. Our task is to separate the domain work laptops that connect to the network via VPN, and other home machines that also connect via VPN. We thought to solve it through a dhcp server, but today I realized that this can be achieved with much less effort through Identity Awareness.

[DexMorgan]

Thanks for the answer. Our task is to separate the domain work laptops that connect to the network via VPN, and other home machines that also connect via VPN. We thought to solve it through a dhcp server, but today I realized that this can be achieved with much less effort through Identity Awareness.

[DexMorgan]

Thanks for the answer. Our task is to separate the domain work laptops that connect to the network via VPN, and other home machines that also connect via VPN. We thought to solve it through a dhcp server, but today I realized that this can be achieved with much less effort through Identity Awareness.

[DexMorgan]

Thanks for the answer. Our task is to separate the domain work laptops that connect to the network via VPN, and other home machines that also connect via VPN. We thought to solve it through a dhcp server, but today I realized that this can be achieved with much less effort through Identity Awareness.

[DexMorgan]

Thanks for the answer. Our task is to separate the domain work laptops that connect to the network via VPN, and other home machines that also connect via VPN. We thought to solve it through a dhcp server, but today I realized that this can be achieved with much less effort through Identity Awareness.

[DexMorgan]

Thanks for the answer. Our task is to separate the domain work laptops that connect to the network via VPN, and other home machines that also connect via VPN. We thought to solve it through a dhcp server, but today I realized that this can be achieved with much less effort through Identity Awareness.

[DexMorgan]

Thanks for the answer. Our task is to separate the domain work laptops that connect to the network via VPN, and other home machines that also connect via VPN. We thought to solve it through a dhcp server, but today I realized that this can be achieved with much less effort through Identity Awareness.

[DexMorgan]

Thanks for the answer. Our task is to separate the domain work laptops that connect to the network via VPN, and other home machines that also connect via VPN. We thought to solve it through a dhcp server, but today I realized that this can be achieved with much less effort through Identity Awareness.

[DexMorgan]

Thanks for the answer. Our task is to separate the domain work laptops that connect to the network via VPN, and other home machines that also connect via VPN. We thought to solve it through a dhcp server, but today I realized that this can be achieved with much less effort through Identity Awareness.

[DexMorgan]

Thanks for the answer. Our task is to separate the domain work laptops that connect to the network via VPN, and other home machines that also connect via VPN. We thought to solve it through a dhcp server, but today I realized that this can be achieved with much less effort through Identity Awareness.

[DexMorgan]

Thanks for the answer. Our task is to separate the domain work laptops that connect to the network via VPN, and other home machines that also connect via VPN. We thought to solve it through a dhcp server, but today I realized that this can be achieved with much less effort through Identity Awareness.

[DexMorgan]

Thanks for the answer. Our task is to separate the domain work laptops that connect to the network via VPN, and other home machines that also connect via VPN. We thought to solve it through a dhcp server, but today I realized that this can be achieved with much less effort through Identity Awareness.

[Sascha_Bremshey]

Now I'm curious.

How can you separate company and home PCs with Identity Awareness.

[Sascha_Bremshey]

Now I'm curious.

How can you separate company and home PCs with Identity Awareness.

[Sascha_Bremshey]

Now I'm curious.

How can you separate company and home PCs with Identity Awareness.

[Sascha_Bremshey]

Now I'm curious.

How can you separate company and home PCs with Identity Awareness.

[Sascha_Bremshey]

Now I'm curious.

How can you separate company and home PCs with Identity Awareness.

[Sascha_Bremshey]

Now I'm curious.

How can you separate company and home PCs with Identity Awareness.

[Sascha_Bremshey]

Now I'm curious.

How can you separate company and home PCs with Identity Awareness.

[Sascha_Bremshey]

Now I'm curious.

How can you separate company and home PCs with Identity Awareness.

[Sascha_Bremshey]

Now I'm curious.

How can you separate company and home PCs with Identity Awareness.

[Sascha_Bremshey]

Now I'm curious.

How can you separate company and home PCs with Identity Awareness.

[Sascha_Bremshey]

Now I'm curious.

How can you separate company and home PCs with Identity Awareness.

[Sascha_Bremshey]

Now I'm curious.

How can you separate company and home PCs with Identity Awareness.

[Sascha_Bremshey]

Now I'm curious.

How can you separate company and home PCs with Identity Awareness.

[Sascha_Bremshey]

Now I'm curious.

How can you separate company and home PCs with Identity Awareness.

[DexMorgan]

Create an Access Role, in the Machines option set the OU Computers or Domain Computers Security Group, apply the Access Role in the rule and set the extended rights for PCs covered by this Access Role. For all other PCs that are not in the domain, make a rule with truncated rights by default.

Or am I misunderstanding something? I am new to this profession, and I will be glad to advice. So far we have not implemented this scheme, but we are just going to do it.

[DexMorgan]

Create an Access Role, in the Machines option set the OU Computers or Domain Computers Security Group, apply the Access Role in the rule and set the extended rights for PCs covered by this Access Role. For all other PCs that are not in the domain, make a rule with truncated rights by default.

Or am I misunderstanding something? I am new to this profession, and I will be glad to advice. So far we have not implemented this scheme, but we are just going to do it.

[DexMorgan]

Create an Access Role, in the Machines option set the OU Computers or Domain Computers Security Group, apply the Access Role in the rule and set the extended rights for PCs covered by this Access Role. For all other PCs that are not in the domain, make a rule with truncated rights by default.

Or am I misunderstanding something? I am new to this profession, and I will be glad to advice. So far we have not implemented this scheme, but we are just going to do it.

[DexMorgan]

Create an Access Role, in the Machines option set the OU Computers or Domain Computers Security Group, apply the Access Role in the rule and set the extended rights for PCs covered by this Access Role. For all other PCs that are not in the domain, make a rule with truncated rights by default.

Or am I misunderstanding something? I am new to this profession, and I will be glad to advice. So far we have not implemented this scheme, but we are just going to do it.

[DexMorgan]

Create an Access Role, in the Machines option set the OU Computers or Domain Computers Security Group, apply the Access Role in the rule and set the extended rights for PCs covered by this Access Role. For all other PCs that are not in the domain, make a rule with truncated rights by default.

Or am I misunderstanding something? I am new to this profession, and I will be glad to advice. So far we have not implemented this scheme, but we are just going to do it.

[DexMorgan]

Create an Access Role, in the Machines option set the OU Computers or Domain Computers Security Group, apply the Access Role in the rule and set the extended rights for PCs covered by this Access Role. For all other PCs that are not in the domain, make a rule with truncated rights by default.

Or am I misunderstanding something? I am new to this profession, and I will be glad to advice. So far we have not implemented this scheme, but we are just going to do it.

[DexMorgan]

Create an Access Role, in the Machines option set the OU Computers or Domain Computers Security Group, apply the Access Role in the rule and set the extended rights for PCs covered by this Access Role. For all other PCs that are not in the domain, make a rule with truncated rights by default.

Or am I misunderstanding something? I am new to this profession, and I will be glad to advice. So far we have not implemented this scheme, but we are just going to do it.

[DexMorgan]

Create an Access Role, in the Machines option set the OU Computers or Domain Computers Security Group, apply the Access Role in the rule and set the extended rights for PCs covered by this Access Role. For all other PCs that are not in the domain, make a rule with truncated rights by default.

Or am I misunderstanding something? I am new to this profession, and I will be glad to advice. So far we have not implemented this scheme, but we are just going to do it.

[DexMorgan]

Create an Access Role, in the Machines option set the OU Computers or Domain Computers Security Group, apply the Access Role in the rule and set the extended rights for PCs covered by this Access Role. For all other PCs that are not in the domain, make a rule with truncated rights by default.

Or am I misunderstanding something? I am new to this profession, and I will be glad to advice. So far we have not implemented this scheme, but we are just going to do it.

[DexMorgan]

Create an Access Role, in the Machines option set the OU Computers or Domain Computers Security Group, apply the Access Role in the rule and set the extended rights for PCs covered by this Access Role. For all other PCs that are not in the domain, make a rule with truncated rights by default.

Or am I misunderstanding something? I am new to this profession, and I will be glad to advice. So far we have not implemented this scheme, but we are just going to do it.

[DexMorgan]

Create an Access Role, in the Machines option set the OU Computers or Domain Computers Security Group, apply the Access Role in the rule and set the extended rights for PCs covered by this Access Role. For all other PCs that are not in the domain, make a rule with truncated rights by default.

Or am I misunderstanding something? I am new to this profession, and I will be glad to advice. So far we have not implemented this scheme, but we are just going to do it.

[DexMorgan]

Create an Access Role, in the Machines option set the OU Computers or Domain Computers Security Group, apply the Access Role in the rule and set the extended rights for PCs covered by this Access Role. For all other PCs that are not in the domain, make a rule with truncated rights by default.

Or am I misunderstanding something? I am new to this profession, and I will be glad to advice. So far we have not implemented this scheme, but we are just going to do it.

[DexMorgan]

Create an Access Role, in the Machines option set the OU Computers or Domain Computers Security Group, apply the Access Role in the rule and set the extended rights for PCs covered by this Access Role. For all other PCs that are not in the domain, make a rule with truncated rights by default.

Or am I misunderstanding something? I am new to this profession, and I will be glad to advice. So far we have not implemented this scheme, but we are just going to do it.

[DexMorgan]

Create an Access Role, in the Machines option set the OU Computers or Domain Computers Security Group, apply the Access Role in the rule and set the extended rights for PCs covered by this Access Role. For all other PCs that are not in the domain, make a rule with truncated rights by default.

Or am I misunderstanding something? I am new to this profession, and I will be glad to advice. So far we have not implemented this scheme, but we are just going to do it.

[Emils_Zeliksons]

May I ask you if you managed to separate AD and non AD connected PCs, I am very interested if it is actually possible to achieve separation using the method you propose?

Thanks in advance.

Emil.

[Emils_Zeliksons]

May I ask you if you managed to separate AD and non AD connected PCs, I am very interested if it is actually possible to achieve separation using the method you propose?

Thanks in advance.

Emil.

[Emils_Zeliksons]

May I ask you if you managed to separate AD and non AD connected PCs, I am very interested if it is actually possible to achieve separation using the method you propose?

Thanks in advance.

Emil.

[Emils_Zeliksons]

May I ask you if you managed to separate AD and non AD connected PCs, I am very interested if it is actually possible to achieve separation using the method you propose?

Thanks in advance.

Emil.

[Emils_Zeliksons]

May I ask you if you managed to separate AD and non AD connected PCs, I am very interested if it is actually possible to achieve separation using the method you propose?

Thanks in advance.

Emil.

[Emils_Zeliksons]

May I ask you if you managed to separate AD and non AD connected PCs, I am very interested if it is actually possible to achieve separation using the method you propose?

Thanks in advance.

Emil.

[Emils_Zeliksons]

May I ask you if you managed to separate AD and non AD connected PCs, I am very interested if it is actually possible to achieve separation using the method you propose?

Thanks in advance.

Emil.

[Emils_Zeliksons]

May I ask you if you managed to separate AD and non AD connected PCs, I am very interested if it is actually possible to achieve separation using the method you propose?

Thanks in advance.

Emil.

[Emils_Zeliksons]

May I ask you if you managed to separate AD and non AD connected PCs, I am very interested if it is actually possible to achieve separation using the method you propose?

Thanks in advance.

Emil.

[Emils_Zeliksons]

May I ask you if you managed to separate AD and non AD connected PCs, I am very interested if it is actually possible to achieve separation using the method you propose?

Thanks in advance.

Emil.

[Emils_Zeliksons]

May I ask you if you managed to separate AD and non AD connected PCs, I am very interested if it is actually possible to achieve separation using the method you propose?

Thanks in advance.

Emil.

[Emils_Zeliksons]

May I ask you if you managed to separate AD and non AD connected PCs, I am very interested if it is actually possible to achieve separation using the method you propose?

Thanks in advance.

Emil.

[Emils_Zeliksons]

May I ask you if you managed to separate AD and non AD connected PCs, I am very interested if it is actually possible to achieve separation using the method you propose?

Thanks in advance.

Emil.

[Emils_Zeliksons]

May I ask you if you managed to separate AD and non AD connected PCs, I am very interested if it is actually possible to achieve separation using the method you propose?

Thanks in advance.

Emil.