1. Store
  2. Apps
  3. Hardware
  4. Support
  5. Solutions

ClearFoundation

Forums
Welcome, Guest
MAC Address Based ACL
(1 viewing) 1 Guest
Go to bottomPage: 1
TOPIC: MAC Address Based ACL
#46607
MAC Address Based ACL 7 Months, 4 Weeks ago  
hii all i am trying to have access control in such a way that dhcp assign IP to only registered MAC addresses. presently i am unable to fined any such rules in the DHPCP or Firewall. I dont want unregistered users to access my network and at the same time i dont want my users to manually configure the IPs. i had this feature in Red Hat server but not in Clear OS5.2. thanks all
tariq sahi
Fresh Boarder
Posts: 8
graphgraph
User Offline Click here to see the profile of this user
The administrator has disabled public write access.
 
#46775
Re: MAC Address Based ACL 7 Months, 3 Weeks ago  
is there any one who would like to ans me ?? or offer an solution. I will be really great full
tariq sahi
Fresh Boarder
Posts: 8
graphgraph
User Offline Click here to see the profile of this user
The administrator has disabled public write access.
 
#46865
Re: MAC Address Based ACL 7 Months, 2 Weeks ago  
I finally managed to resolve this issue at my own its okay that i didn't receive any help from the forum.
This topic is for those who don't want that there network can be accessed by the unregistered users. These rules will allow the DHCP to assign the IP to only registered users. first of all you will have to install custom rules in firewall then input following rules.
iptables -I INPUT -i eth1 -j DROP
iptables -I INPUT -m mac --mac-source 00:1e:c9:47:00:dc -j ACCEPT
you can replace the MAC address and eth interface to that you are using. the important thing here is that iptables -I INPUT -i eth1 -j DROP has to be at the top and rest of the rules underneath it. Good luck with your network managment
tariq sahi
Fresh Boarder
Posts: 8
graphgraph
User Offline Click here to see the profile of this user
The administrator has disabled public write access.
 
Go to topPage: 1
  get the latest posts directly to your desktop