RE: Re: MAC Spoofing Prevention in Wireless

["David Gillett" <gillettdavid () fhda edu>]

   It's not "straightforward" at all.  How do you tell that there are two
MACs the same on the network?

  On a wired network with STP enabled, you know there's *something* strange
going on if you see packets with the same source MAC address from more than
one wired interface.  But that simply doesn't translate to wireless.

(HINT:  MAC addresses are supposed to be unique on a subnet/segment.  If
they're not, your network is out of spec and unlikely to work properly; any
communications that happen to work are just good luck and may not be
reproducible.)

David Gillett


-----Original Message-----
From: bjesmer () platformsolutions com [mailto:bjesmer () platformsolutions com]
Sent: Friday, July 08, 2011 12:31
To: security-basics () securityfocus com
Subject: Re: Re: MAC Spoofing Prevention in Wireless

The concept is fairly straight forward. The AP looks to see if there are 2
MACs of the same on the network and disallows the second one on the network.
Not having worked with the Aruba yet, i would try a deauth attack against
the mac you are going to spoof and then try to get on. If you can deauth
that client and get on before it, you might be able to get in.

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate In this guide we
examine the importance of Apache-SSL and who needs an SSL certificate.  We
look at how SSL works, how it benefits your company and how your customers
can tell if a site is secure. You will find out how to test, purchase,
install and use a thawte Digital Certificate on your Apache web server.
Throughout, best practices for set-up are highlighted to help you ensure
efficient ongoing management of your encryption keys and digital
certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727
d1
------------------------------------------------------------------------



------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------