Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

https://www.google.com/webhp?sourceid=chrome-instant&rlz=1C1LENP_enUS521US521&ion=1&espv=2&ie=UTF-8#q=radius%20server

Posted on 2014-12-02
6
Medium Priority
?
522 Views
Last Modified: 2015-03-17
I would like to prevent LAN access via MAC address. IE, only assign DHCP addresses via MAC address, to prevent employees from bringing their home systems to work and plugging them into an Ethernet port to access my network.
0
Comment
Question by:walkerps
  • 4
  • 2
6 Comments
 

Author Comment

by:walkerps
ID: 40477517
Can you recommend a stand alone system, that would work with WiFi access points and my domain controllers.

Sorry if this sounds elementary, I'm new to security of this type.
0
 
LVL 3

Expert Comment

by:BrightApollo
ID: 40478253
All right, list out your network topology and let's see what you have to work with.  This would be WiFi routers, bridges, and so forth.
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 

Author Comment

by:walkerps
ID: 40478712
Xirrus WiFi, HP Pro Curve Switches, Server 2008 R2 Domain Controller.
0
 
LVL 3

Accepted Solution

by:
BrightApollo earned 1500 total points
ID: 40478742
You can configure the switches and the WiFi APs to use a MAC whitelist for access control.  I wouldn't try to use the domain controllers to perform access control because it's too far downstream.  At this point, I suggest reading up on ACL and access control using MAC for your devices and configuring them.
0
 
LVL 3

Expert Comment

by:BrightApollo
ID: 40670342
Thanks for closing the loop on this.
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I originally wrote this article to compare SARDU and YUMI, but have now added Easy2Boot, since that is the one I currently use and find the easiest to create and alter.
The core idea of this article is to make you acquainted with the best way in which you can export Exchange mailbox to PST format.
This video will demonstrate how to find the puppet warp tool from the edit menu and where to put the points to edit.
An overview on how to enroll an hourly employee into the employee database and how to give them access into the clock in terminal.

885 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question