Binding MAC to IP Statically
Yonatan Bokovza
Yonatan at xpert.com
Mon Sep 8 02:08:51 PDT 2003
> -----Original Message-----
> From: Chuck Swiger [mailto:cswiger at mac.com]
> Sent: Sunday, September 07, 2003 23:10
> To: Colin Watson
> Cc: freebsd-questions at freebsd.org
> Subject: Re: Binding MAC to IP Statically
>
>
> Colin Watson wrote:
> [ ...rewrapped to 80-columns... ]
> > Any way to bind a MAC address statically to an IP?. I wish
> to do this to
> > prevent a user from changing his IP address on the subnet,
> so if he does he
> > can't pass traffic. I have experimented with ipfw, but I
> can't quite see how
> > I could accomplish the binding of a IP statically to a
> nic's MAC. Any ideas
> > be appericated.
>
> IPFW2 lets you perform firewall actions on a MAC address,
> rather than an IP.
>
> You can configure a DHCP server to staticly allocate an IP
> address to that
> machine via something like this in {/usr/local}/etc/dhcpd.conf:
>
> host pi.codefab.com {
> hardware ethernet 00:00:00:00:00:00;
> fixed-address 66.234.138.67;
> }
Look for static arp. The basic idea is that you tell your
interface to not use arp (see ifconfig(8) -arp) and give
it a static binding of MAC addresses to IP addresses
(see arp(8) -f).
More information about the freebsd-questions
mailing list