This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Looking for Astaro equivalent of a Cisco feature

Does anyone know if Astaro has something similar to the Cisco ip verify reverse-path feature? I can't remember seeing it and coming up dry just tooling around through the GUI. Thanks.

This thread was automatically locked due to age.

Parents

0 Gert Hansen over 18 years ago

Hi,

yes the ASG uses a linux 2.6 kernel which has a reverse path filter included. On top of that ASG has its Spoof Protection functionality goes beyond that and checks even more if the right ip comes in and leaves via the right interface.

regards
Gert
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 18 years ago in reply to Gert Hansen

Thanks Gert. Appreciate the response.
Cancel
Vote Up 0 Vote Down

Cancel
0 Datsys over 18 years ago in reply to Scott_Klassen

I have heard about another Cisco feature that allows the device to "learn the Mac addresses of the machines that are supposed to be connecting through it and then allow the Administrator to filter activity based on that information. How do I setup the Astaro to filter based on Mac address and what would be the easiest way for it to be provided with the mac address information of machines on the LAN side?
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 18 years ago in reply to Datsys

You can do static MAC mappings in the DHCP settings, but IIRC, you cannot filter on MAC in the event that someone uses a static IP.

Barry
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BarryG over 18 years ago in reply to Datsys

You can do static MAC mappings in the DHCP settings, but IIRC, you cannot filter on MAC in the event that someone uses a static IP.

Barry
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Datsys over 18 years ago in reply to BarryG

Thanks for the reply BarryG. The static s are not being much of a problem because we have set only Servers and printers to have static IPs. The pain is really on the DHCP side where anybody can carry in a laptop and just plug it in to get net. Please pitty a newbie here, but what would be the easiest and fastest way for us to get the mac info from the various machines to the Astaro. The client is being told that if they had a Cisco it would learn it automatically so they are getting a little touchy.
Cancel
Vote Up 0 Vote Down

Cancel
0 Datsys over 18 years ago in reply to Datsys

After thought here. Would I be getting greedy if I wanted to do both mac and static ip. My thinking here is that I could set set the statics to timed events like windows update (which is really all they need) and still control the others via mac. This way I can restrict any of them to time or block them from certain sites or any other restriction I need to use when I want to.
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 18 years ago in reply to Datsys

I believe you can see the MAC addresses of the DHCP clients in the DHCP leases page in ASL.
Then, you could create static mappings for those MACs.

If you want to prevent random laptops, etc., from connecting, don't leave any extra DHCP ranges available.

Someone who knows what they're doing could still setup a static IP though.

Time-based rules are tied to IPs, but you could setup some IP ranges for different kinds of clients, and then do rules on those ranges.

Barry
Cancel
Vote Up 0 Vote Down

Cancel