This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Mac address filtering?

I deployed an ASG to one of our locations, where I want only the devices we setup to communicate over the tunnel. I prefer a mac filtering, so I know it's those devices, but don't see any mac filtering option in 7.507. You can't setup the packet filters based on MAC addyresses can you?

I used dhcp option 'clients with static mappings only', no auto packet filter on the tunnel and set up the packet filter rules based on the IP's to allow the communication over the tunnel. But there is nothing stopping them at that site of shutting down a device, using the same IP to pass the ruleset.

Is there no real way of insuring only the devices I want communicate over a tunnel? No mac filtering at all? Isn't this a simple option on even the Linksys $60 firewalls? What am I missing here? Thanks!

Brian

This thread was automatically locked due to age.

0 Jack Daniel over 15 years ago

MAC filtering is really of limited value, the MAC address of any system can easily be changed from the address assigned by the manufacturer (unless the system is really locked down).

The static mapping restriction you have set up is the best answer for controlling access by MAC at this time.

There is a feature request for MAC address filtering, comment and vote it up at Network Security: MAC Based Packet Filter Rules
Cancel
Vote Up 0 Vote Down

Cancel
0 BSavage over 15 years ago in reply to Jack Daniel

Thanks Jack.
Cancel
Vote Up 0 Vote Down

Cancel