Question for mac adress filtering.

mkp · 12-07-2009, 05:30 AM

I have network of 150-200pc, they are set with static ip. Now i use ip-sentinel for mac filtering, but i'm dissatisfied from it. So, can i use arp table for mac filtering, or it's only for dhcp?

timmeke · 12-07-2009, 05:32 AM

DHCP hands out IP address from a given range (ie dynamic IPs). This is -in principle- not related to MAC physical addressing.
DHCP can help share some networking configurations on the network.
Would you prefer centralized MAC filtering (ie on central gateway)? Or de-central (on each machine)?

kirukan · 12-07-2009, 08:43 AM

i think ebtables will help for layer 2 level filtering

mkp · 12-07-2009, 11:58 AM

dhcpd is stoped, i use only static ip.

timmeke what do you mean?

kirukan is eptables is like ip-sentinel or it's more powerful?

Can i use something like this:
create file ip-mac.conf in /etc with:

1.2.3.4 aa:bb:cc:dd:ee:ff
1.2.3.5 aa:bb:cc:dd:ff:ff

then:

arp -f /etc/ip-mac.conf

jefro · 12-07-2009, 04:20 PM

I thought it was for finding out phoney IP address's not mac filtering.