Captive portal

[#1]

Hello,

I'm looking at the captive portal in NIOS and I wonder how dependent this solution is on clients actually using DHCP? It seems to me that if a client configures a static IP-address at the operating system level it will be able to bypass the whole mechanism. Am I missing something here?

Best regards,

Rutger

[#2]

you can implement DHCP Snooping, IP Source Guard, and while you're at it, ARP inspection. These technologies will stop static IP addresses, rogue DHCP servers, and ARP poisoning MitM attacks dead in their tracks.