Blocking at firewall via MAC address

["B. Scott Harroff" <Scott.Harroff () att net>]

A business parter has a security requirement that only pre-identified and
approved laptops (identified by MAC address acting as a physical token) can
access a network behind a firewall.  Identification and blocking by IP
address alone is not acceptable as it could be too easily changed by a user
to match the IP address of an approved machine.

This could be done by placing a smart switch that only allows cerain MAC's
on certain ports to communicate with the firewall.  The other (cost
preferable) option would be to have the firewall block communications from
all but machines with approved MAC and IP addresses.

Does anyone have a soltion on how to block via MAC address with OpenBSD?

_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards