Tie authentication to IP address

[Bairdo]

as well as MAC & port.

But how get the IP associated with the user?

• captive portal knows it at auth time.
• 1X doesn't.
• add a mirror rule or something to learn the IP address (from clients view). (remove rule once learnt. perhaps add a rule that checks if it changes.).
• mirror dhcp from dhcp server.
• tie in with a dhcp server? - probably safest, but might force user(admin) to only use one specific dhcp server.

[Bairdo]

isc-dhcp server has an API both (TCP and C by the looks of it) see: http://www.ipamworldwide.com/ipam/isc-dhcp-api.html and https://www.isc.org/wp-content/uploads/2018/02/dhcp44omapi.html