Craig, There is a radius.lrp which works OK (but read the radius instructions carefully!) http://www.radius.cistron.nl/ www.gnu.org/software/radius/radius.html Joep On Thu, 2005-04-14 at 23:54, Craig Caughlin wrote: > Oh, I agree completely. It just seems like a "quick & dirty" method to keep > the auditors that I've personally met (who, IMHO, are not "the sharpest > knives in the drawer") happy. > > I like method number 2, but Bering doesn't support that..does it??? If it > does, well hey, tell me more! I'll be on that like white on rice. > > Thank you, > Craig > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Eric Spakman > Sent: Thursday, April 14, 2005 2:38 PM > To: [EMAIL PROTECTED] > Cc: leaf-user@lists.sourceforge.net > Subject: RE: [leaf-user] Provide DHCP address ONLY to predetermined MAC > address? > > > Hello Craig, > > I understand what you are trying to do, but it goes beyond my > knowledge of the dnsmasq setup. > > It's also a weak security method, you only prevent someone getting an > ip address if the mac address is not listed in a dhcp pool. Someone > who wants to get access can easely spoof a mac address or take a > fixed ip address in the subnet. > > A better method for securing a network against unwanted access with a > laptop is by using 802.1x (Validated Network Access). Where the > laptop is authenticated against Radius via the switch and Active > Directory to give access on hardware level (network link). It does > this by checking the machine level name/password (not the user > name/password), which is stored in AD, and some other values and > (fully) opens the switch port when everything is allright. > > Eric > > > > > ------------------------------------------------------- > SF email is sponsored by - The IT Product Guide > Read honest & candid reviews on hundreds of IT Products from real users. > Discover which products truly live up to the hype. Start reading now. > http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click > ------------------------------------------------------------------------ > leaf-user mailing list: leaf-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/leaf-user > SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click ------------------------------------------------------------------------ leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
