Warning: Function ereg() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 4

Warning: Function split() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 19

Warning: Function ereg() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 4

Warning: Function split() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 19

Warning: Function ereg() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 4

Warning: Function split() is deprecated in ..../includes/class_postbit.php(345) : eval()'d code on line 19
Restrict network access
Results 1 to 3 of 3

Thread: Restrict network access

Hybrid View

  1. #1

    Restrict network access

    Hi,

    Let's say we have a network with DHCP running. All servers are configured to use DHCP. Each server get's allocated the same IP address from the DHCP server. All clients get diferent addresses based on the available addresses from the DHCP pool.

    If I wanted to restrict someone from plugging in a device and setting their device up with a static IP Address is there a way to restrict access to the network? I would like to think its possible to give the user a message saying they are not authorised to do this. I could simply run over his fingers with my chair so he cant grasp the RJ45 connector to plug it in :-)

    Any feedback is appreciated.

    Thanks in advance.

    Phil

  2. #2
    I think the only way you'd be able to do this would be if your router allowed you to permit or deny traffic based on MAC addresses. Even then, you'd have to collect all the MAC addresses from all nodes on your network, and restrict traffic to only those. Even on this case, someone could find out the MAc of node on your network and try to spoof it.
    My crime is that of curiosity. My crime is that of judging people by what they say and think, not what they look like. My crime is that of outsmarting you, something that you will never forgive.

  3. #3
    Moderator
    Good Guru
    Compunuts's Avatar
    Join Date
    May 2001
    Location
    California
    Posts
    3,935
    Yeah, either MAC or host based restriction but like Trickster said, there is no way to prevent anyone from spoofing/cloning MAC or host names.

    Other possible solution would be to use domain controllers and only allow to use network resources if the client is authenticated against your DC. Actually that's what DCs are for.

    To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
    - The truely community run Linux/Floss forum !

    No IT BS !!

Similar Threads

  1. Still have network with PC and linux server through router without internet access?
    By Galileo in forum Linux - Hardware, Networking & Security
    Replies: 0
    Last Post: 03-11-2012, 05:54 PM
  2. Unable to access remote machine after network upgrade
    By n.dave in forum Linux - Hardware, Networking & Security
    Replies: 5
    Last Post: 12-06-2008, 05:36 AM
  3. Network Access Server
    By haariseshu in forum Redhat / Fedora
    Replies: 2
    Last Post: 06-01-2008, 07:48 AM
  4. Restrict downloading a file
    By omidkamangar in forum Linux - Hardware, Networking & Security
    Replies: 4
    Last Post: 03-09-2008, 01:55 AM
  5. Windows LAN: Connection present, but won't access network...
    By Lixus Looser in forum Windows - General Topics
    Replies: 11
    Last Post: 02-27-2004, 03:01 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •