RE: MAC Authentication device

["Hasnain Atique" <hatique () hasnains com>]

Using MAC-based authentication is essentially flawed, since the MAC can
easily be spoofed in softwre. Consider firewalling your entire network,
and allowing access via a VPN which authenticates your trusted users.
Thus, gaining port access or even an IP address from a DHCP server won't
expose your trusted network.


> -----Original Message-----
> From: aladin168 [mailto:aladin168 () hotmail com] 
> Sent: Wednesday, November 19, 2003 5:54 AM
> To: security-basics () securityfocus com
> Subject: MAC Authentication device
>
>
>
>
> Hi,
>
>
>
> Can anyone recommend a device that will do MAC Address 
> Authentication before allowing a user/computer to connect to 
> the network.  This is different then MAC Address filtering, 
> which allow or disallow access to the Internet for the the 
> systems that are already on the network.
>
>
>
> I am trying to find a cheap device that will help me control 
> non-employees accessing our trusted network.
>
>
>
> Thanks,
>
> /Kyle
>
> --------------------------------------------------------------
> -------------
> --------------------------------------------------------------
> --------------


---------------------------------------------------------------------------
----------------------------------------------------------------------------