Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 14 Feb 2002 14:54:20 -0500
From:      Brian Minder <bmm@minder.net>
To:        Jaime Kikpole <jkikpole@cairodurham.org>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: Limiting access to DHCP leases
Message-ID:  <20020214195420.GA16470@waste.minder.net>
In-Reply-To: <20020214142736.Q65517-100000@zeus>
References:  <20020214142736.Q65517-100000@zeus>

next in thread | previous in thread | raw e-mail | index | archive | help

--KsGdsel6WgEHnImy
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

On Thu, Feb 14, 2002 at 02:32:57PM -0500, Jaime Kikpole wrote:
> 
> 	Is there a way to prevent unauthorized computers from accessing
> our network?  I'm not refering to password protecting a file server.  I
> mean locking out unknown MAC addresses.  I know that I could try to
> collect the MAC addresses of our 550+ workstations and start handing out
> only static IPs and only handing them to those known MAC addresses.  But
> what about people smart enough to configure an IP stack on their own
> laptop?  Is there some way to prevent access, maybe through an arp proxy
> of some kind?

I've had success providing this kind of access control with a few flavors
of switches, most recently with Extreme Networks gear.  With ExtremeWare,
you can assign MAC addresses to specific VLAN's, and choose whether to
assign unknown devices to the default VLAN or to ignore them altogether.

Thanks,

-Brian

-- 
bmm@minder.net                                                1024/8C7C4DE9

--KsGdsel6WgEHnImy
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Comment: For info see http://www.gnupg.org

iQCVAwUBPGwV7BekvEeMfE3pAQEwOwP7Bbaw9UTz/pA4hiKB19oEDEeNXRsJPh4j
LRqGM9LCZQlchs8lcaJh7ufuKnqSdWF6w21qi6eGHQHJtcKTDdExK0/Snw4L9Jya
eDe9OqO1wH5WWkrDb5Xo8txaGQz7A/LQDX9b93+SEKNjBSQMemcCnLU3xblJtGcc
qyYLU8UoFr8=
=fZNO
-----END PGP SIGNATURE-----

--KsGdsel6WgEHnImy--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020214195420.GA16470>