Binding MAC to IP Statically
Yonatan Bokovza
Yonatan at xpert.com
Mon Sep 8 02:48:51 PDT 2003
> -----Original Message-----
> From: Timur [mailto:thor at telecom.sarkor.uz]
> Sent: Monday, September 08, 2003 12:34
> To: Yonatan Bokovza
> Cc: freebsd-questions at freebsd.org
> Subject: Re: Binding MAC to IP Statically
>
>
> On Mon, Sep 08, 2003 at 12:07:33PM +0300, Yonatan Bokovza wrote:
> > > -----Original Message-----
> > > From: Chuck Swiger [mailto:cswiger at mac.com]
> > > Sent: Sunday, September 07, 2003 23:10
> > > To: Colin Watson
> > > Cc: freebsd-questions at freebsd.org
> > > Subject: Re: Binding MAC to IP Statically
> > >
> > >
> > > Colin Watson wrote:
> > > [ ...rewrapped to 80-columns... ]
> > > > Any way to bind a MAC address statically to an IP?. I wish
> > > to do this to
> > > > prevent a user from changing his IP address on the subnet,
> > > so if he does he
> > > > can't pass traffic. I have experimented with ipfw, but I
> > > can't quite see how
> > > > I could accomplish the binding of a IP statically to a
> > > nic's MAC. Any ideas
> > > > be appericated.
> > >
> > > IPFW2 lets you perform firewall actions on a MAC address,
> > > rather than an IP.
> > >
> > > You can configure a DHCP server to staticly allocate an IP
> > > address to that
> > > machine via something like this in {/usr/local}/etc/dhcpd.conf:
> > >
> > > host pi.codefab.com {
> > > hardware ethernet 00:00:00:00:00:00;
> > > fixed-address 66.234.138.67;
> > > }
> >
> > Look for static arp. The basic idea is that you tell your
> > interface to not use arp (see ifconfig(8) -arp) and give
> > it a static binding of MAC addresses to IP addresses
> > (see arp(8) -f).
>
> This solves the problem, but creates another one - your clients must
> statically bound MAC address of your router (default gateway) to IP
> address.
Correct. It is best for small, unchanging networks. DMZ for example.
More information about the freebsd-questions
mailing list