RE: block un-authorized computer in VLAN

["Jason Chung-Tung" <jason.chung-tung () excendis com>]

Consider using a combination of Cisco port security and 802.1x

-----Original Message-----
From: john.popp () fhr com [mailto:john.popp () fhr com]
Sent: Tuesday, August 26, 2003 8:20 AM
To: security-basics () securityfocus com
Subject: Re: block un-authorized computer in VLAN


In-Reply-To: <20030825130212.35890.qmail () web40811 mail yahoo com>

Cisco switches support Dynamic VLANS - useing VMPS to register a list of

MAC address's allowed on a VLAN -



> Hi, All

>

> Anyone has ideas how to block un-authorized computer

> accessing LAN from visitors who have physical access

> to the the same building? I am thinking about doing

> something (like block MAC address) in the VLAN switch.

>

> Thanks/John


---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training),
October 1-2 (Briefings) in Tysons Corner, VA; the world's premier
technical IT security event.  Modeled after the famous Black Hat event in
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.
Symantec is the Diamond sponsor.  Early-bird registration ends September
6.Visit us: www.blackhat.com
----------------------------------------------------------------------------


---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training), 
October 1-2 (Briefings) in Tysons Corner, VA; the world's premier 
technical IT security event.  Modeled after the famous Black Hat event in 
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.  
Symantec is the Diamond sponsor.  Early-bird registration ends September 6.Visit us: www.blackhat.com
----------------------------------------------------------------------------