Locking IP to MAC

[MikeLucas]

Ok so I recently bought a Gargoyle router and am LOVING the features on it, however I've run into a small problem.

I am running Gargoyle 1.4.7 and this is my issue;

I have locked down my entire DHCP scope by MAC address so that each user has a range of 10 ip addresses with an associated bandwidth cap.

Ok so on the surface that works great, if they get their IP address via DHCP it locks the IP address I want (VIA associated MAC) to the hostname I have assigned and monitors bandwidth usage accordingly... then I run into this snag...

One of the users has discovered he can manually change his IP address, by doing this he jumps out of his assigned MAC to IP address span and is then able to use one of the other users bandwidth quotas...

I see the option that says
"Block MAC addresses assigned a static IP that connect from a different IP" and I check it, assuming it should do that the way I am interpreting it which is to say
"Block MAC addresses from internet access if they are assigned a static IP, but change the IP to something other than statically assigned (by the router)" which is EXACTLY what I want, however it doesn't seem to work.

Any suggestions?

[ispyisail]

can you show screen shots?

Is the MAC address exactly the same?

Can you simulate the bypass on your own machine?

[MikeLucas]

can you show screen shots?

Is the MAC address exactly the same?

Can you simulate the bypass on your own machine?

Not sure I understand your question, the user has not changed his MAC address (although this too is possible less users know of this, and or how to do it) Yes the MAC address matches, as the user would not be able to connect at all otherwise, and would not under DHCP as described above be pulling the correct IP address if it did not.

I have simulated the bypass on my computer, all I have to do is manually set my IP address to one that the router is issuing out to another user instead of letting it pull from DHCP. The router then shows and records bandwidth usage against that user as if I was the actual device from that user (ignoring the MAC address assignment and going only with IP).

[ispyisail]

There was a big change after 1.5.6

http://www.gargoyle-router.com/wiki/dok ... =changelog

I would be good if you could try 1.5.6