Posted on 2014-12-02
Last Modified: 2015-03-17
I would like to prevent LAN access via MAC address. IE, only assign DHCP addresses via MAC address, to prevent employees from bringing their home systems to work and plugging them into an Ethernet port to access my network.
Question by:walkerps
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2

Author Comment

ID: 40477517
Can you recommend a stand alone system, that would work with WiFi access points and my domain controllers.

Sorry if this sounds elementary, I'm new to security of this type.

Expert Comment

ID: 40478253
All right, list out your network topology and let's see what you have to work with.  This would be WiFi routers, bridges, and so forth.
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!


Author Comment

ID: 40478712
Xirrus WiFi, HP Pro Curve Switches, Server 2008 R2 Domain Controller.

Accepted Solution

BrightApollo earned 500 total points
ID: 40478742
You can configure the switches and the WiFi APs to use a MAC whitelist for access control.  I wouldn't try to use the domain controllers to perform access control because it's too far downstream.  At this point, I suggest reading up on ACL and access control using MAC for your devices and configuring them.

Expert Comment

ID: 40670342
Thanks for closing the loop on this.

Featured Post

Revamp Your Training Process

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A list of useful business intelligence software.
There are many software programs on offer that will claim to magically speed up your computer. The best advice I can give you is to avoid them like the plague, because they will often cause far more problems than they solve. Try some of these "do it…
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

632 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question