Tool or settings which will disable communication with unknown MAC addresses

Exists some tool or settings which can I use for disable communication PCs with server that have unknown MAC addreeses?
LVL 1
pospichalalesAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

B HCommented:
can you please explain in more detail what you're trying to do?

mac addresses are only unknown for a few seconds, then they become known and stored in each devices ARP table.

maybe you mean ip addresses?  

what kind of communication do you want to block?  from what to what, by what protocol

0
pospichalalesAuthor Commented:
I want to block PCs that have MAC address which is not in some MAC table.
I want to block all communication with network.
0
B HCommented:
you could disable dhcp, and assign an ip address to the machines you want on the network... that way when someone plugs in a different machine, they get no ip address... is that what you mean?

or, you could get a network switch which provides for VLAN functionality, and put your stuff in one vlan, that will block communication from anything not specifically allowed in the vlan

windows itself can do little with mac addresses... you can tell your dhcp server "always give [this ip address] to [this mac address]" but that's basically the extent of it.

0
pospichalalesAuthor Commented:
basically yes, but users can assign IP address manuallly.
I am not sure if all my switches support MAC filtering or VLANs.

Is there any other way how to block unwanted PCs?
0
B HCommented:
you can use the windows firewalls on the machine(s) to allow only specific ip addresses - but no not mac addresses

you would need an expensive network switch to specify things by mac address/port numbers/vlans

blocking in your case might be best done at the application level, via windows firewalls and passwords
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.