Security Basics mailing list archives
Re: MAC Authentication device
From: InCisT <InCisT () popsikle net>
Date: Wed, 19 Nov 2003 20:41:20 -0500
Joann Jane wrote:
The consultants will be on-site, and my client want to be able to control them by giving them a PCMCIA Network Card.We don't even allow wireless cards, these will be wired network cards.Any idea on how to ONLY allow authorized people to get on the network? Problem is that we can't control who can get on the network because whoever plug into the data jack on the wall can assign themselves an IP, which is mainly our concern.Thanks so much.MAC Spoofing, I know it can be done with SMAC, http://www.klcconsulting.net/smac right?
You could look at ACL lists for your routers. We are aware of the people that can assign themselves an ip on our network, but we have other devices inline that monitor the traffic (stalker boxes) and also IDS on our internal network to detect any anomiles. MAC spoofing can be done with alot of tools, even most of the newer NIC drivers let you set the MAC address right in the driver. You could run a completely the wall jacks on a completly different physical connection and assign each one a vpn account to vpn into your main network. But if someone you dont want on your network is already in the building, you got alot more to worry about then them getting on your network!
InCisT --------------------------------------------------------------------------- ----------------------------------------------------------------------------
Current thread:
- MAC Authentication device aladin168 (Nov 19)
- RE: MAC Authentication device Hasnain Atique (Nov 20)
- Re: MAC Authentication device Tim Syratt (Nov 20)
- Re: MAC Authentication device Oleksandr Darchuk (Nov 20)
- Re: MAC Authentication device Ansgar -59cobalt- Wiechers (Nov 20)
- Re: MAC Authentication device Timo Schoeler (Nov 20)
- RE: MAC Authentication device arek (Nov 21)
- Re: MAC Authentication device Timo Schoeler (Nov 20)
- Re: MAC Authentication device David Nichols (Nov 20)
- Re: MAC Authentication device Kevin Saenz (Nov 21)
- <Possible follow-ups>
- RE: MAC Authentication device Mike (Nov 20)
- Re: MAC Authentication device InCisT (Nov 20)
- Re: MAC Authentication device Fernando Gont (Nov 20)
- RE: MAC Authentication device Mike (Nov 20)
- RE: MAC Authentication device Mike (Nov 20)
- RE: MAC Authentication device Wilcox, Stephen (Nov 20)
- Re: MAC Authentication device Joann Jane (Nov 21)
- RE: MAC Authentication device Batkin, Seva (Nov 21)