Re: Blocking access to network via IP/MAC/dhcpd?
This is a discussion on Re: Blocking access to network via IP/MAC/dhcpd? within the IPFilter forums, part of the System Security and Security Related category; On 2007-11-29 17:49, Mire, John wrote: > We blackhole in the core 6509s using the mac address ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
11-29-2007
|
|||
|
|||
Re: Blocking access to network via IP/MAC/dhcpd?
On 2007-11-29 17:49, Mire, John wrote:
> We blackhole in the core 6509s using the mac address along with port security on the access layer with only one(1) MAC address association per port, In that case, setting static arp entries on the firewall and disabling native arp on the protected interface(s) should do the trick. Prolly the easiest effective option. -- Jefferson Ogata <Jefferson.Ogata@noaa.gov> NOAA Computer Incident Response Team (N-CIRT) <ncirt@noaa.gov> "Never try to retrieve anything from a bear."--National Park Service 
|
Linear Mode
