Restrict access to the network on 871 router via mac address

Hello

I have a Cisco 871 router and I am trying to allow only specific MAC addresses access to the network. Is there a way to specify that only specific MAC addresses are allowed to access? Any other MAC access will be denied?

I can either have static IP or DHCP for local machines.

Can I use this "secure DHCP IP address assignment" details found here... http://www.cisco.com/en/US/docs/ios/12_2t/12_2t15/feature/guide/ftdsiaa.html ?

I use these...

static Mac address table

OR

Security table of Mac addresses

... to achieve this?

Thank you.

You can use "mac-address-table static" If you know all the mac addresses that will be connected.

If the router is by distributing ip addresses so you can indeed do secure IP DHCP address assignment.

Note that you can make a 'mac access-list' switch and aplly in any vlan you want.

Alternatively, you can do "dhcp snooping" allowing guests who got a dhcp ip addresses and are not identity theft.

I hope it helps.

PK

Tags: Cisco Security

Similar Questions

  • How to restrict access to the network for customers in the lobby.

    Hello

    How is - this preferable to limit the access of the data ports in the lobby of the company for Internet access only? Although the hosts are not on the field, is it safe to allow them to reach the port of data?

    I suggest setting up a vlan separate for these ports and usig dot1q on trunk this vlan to a DMZ interface dedicated or the subinterface on your firewall with an ACL that only allows access to the internet. That should do the trick.

  • access to the network drive on XP vm & Mac host

    I'm under vmware 2.0.5 and XP SP3 via bootcamp on OSX 10.5.8. If I map a network drive in a virtual machine XP, I can access is no longer the Mac host.  If I map the drive but share the network as a record disk using vmtools, I can access it from the Mac and XP vm.  Is this a normal behavior?  I would have thought the right way to proceed would be to treat all people as a 'computer' apolitical and connect directly to any external network resource rather than sharing an external resource via the host mac.  I also noticed that my score bootcap 'disappears' from my Mac when vmware is running... It's just for protection?

    Thank you

    Bruce

    Mapped network drives can be mounted to 1 place at one time, then Yes, what you're feeling is normal behavior.

    What type of network you are using?  NFS? SMB? AFP?

    When you use shared folders, we pass everything through a 'passive' network share to work around this problem (among other reasons), allowing you to access the folder of the host and theguest.

    The boot camp partition dismantles the workstation for the same reason... some things can not be mounted at 2 places at the same time.

  • Control access to the network with ACS device

    Hi all!

    I currently have in place an Appliance, Cisco Secure ACS using Windows as main server authentication. Cisco Secure acts as a GANYMEDE server +. I have two groups defined in Cisco Secure: Netadmins and security ITD. Users of the Netadmins group need access to all switches and routers on the network. ITD security must only access async line 53 on a router 2611 for a band of a firewall and no other access to all network devices offline. How can I limit access to the Cisco Secure security ITD group to line 53 only?

    My current config on this router is:

    AAA new-model

    AAA authentication login netadmins group Ganymede + line

    connection ITDSEC authentication group Ganymede + line of AAA.

    RADIUS-server host 10.30.X.X

    RADIUS-server host 10.18.X.X

    key radius-server XXXXXXX

    line 53

    No exec

    authentication of the connection ITDSEC

    transport of entry all

    StopBits 1

    Speed 115200

    line vty 0 4

    exec-timeout 30 0

    login timeout 120 response

    login authentication netadmins

    but users in the ITD security can still access by vty and then reverse telnet to any asynchronous line on the router. In addition, security ITD always access any switch or router using telnet: what should be my setup on these devices? I do an ACS configuration?

    All other devices:

    AAA new-model

    AAA authentication login netadmins group Ganymede + line

    RADIUS-server host 10.30.X.X

    RADIUS-server host 10.18.X.X

    key radius-server XXXXXXX

    Line con 0

    password 7 141C015C5806

    login authentication netadmins

    line vty 0 4

    password 7 11020A 524310

    login authentication netadmins

    line vty 5 15

    password 7 11020A 524310

    login authentication netadmins

    Any help will be greatly appreciated.

    Hello

    In the security group, I would create a Restriction of access to IP network with an entry permit. Essentially to allow access to the single port on 2611 only.

    The AAA Client field is the name that you gave to the 2611 in the network config. Address will be * unless you want to restrict access to the ip or address. Port... never quite sure with async if the port value must be "async 53" or "line 53".

    If you look in the pass/fail for the nas-port attribute, you'll see what that T + sends to the ACS. This should help you know what to put in the NAR.

    Mounira

  • LATITUDE DE820 wiped out loaded XP drivers DELL & SW, no access to the network

    Everyone out there - I need HELP... I bought a second hand LATITUDE DE820 with Windows 7 above and it worked fine (also WIFI). I need to load XP Prof on it (Yes...) and therefore all DELL SW disappeared (had no CD DELL) that I loaded package XP 3 Service that I plugged in Ethernet, but I also have a WLAN - but NO communication to all NETWORKS. Ping an IP address any LAN brings 'Host unreachable' IPConfig/all shows: IP of Windows host Setup...: laptop Prim. DNS: Enter Mode: Broadcast IP routing enabled: No. WINS Proxy enabled: Ethernet adapter without Bluetooth network connection: media state: media disconnected Description: peripheral physical addr Bluetooth (Personal Area Network): Mac addr. Control Panel-> network connections displays LAN at the Connecticut 1394 network adapter (properties: peripheral works properly, driver: MS 07/01/2001!) Connection status: connected but 0 packet protocols: f. Client Microsoft NW File & Printer sharing TCP - IP - trying to hit the repair-> msg "TCP/IP not enabled for this connection") Conclusion: I think that my XP drivers are too old, or not DELL problem: I have no access to the network - minimum need drivers update for access to Internet, and then upgrade to download that/those pilot on a Non-Dell PC then CD, then install on the laptop don't know DELL HW, used Service tag to find 11 drivers, drivers resp. 75 for that I think it's a driver of 'network' - but don't know what or any other suggestion? Thks for any help Peter

    Well well maybe it was because I realized that I needed to insert HTML
    to get my text with line breaks.
    But in any case the problem is solved by support group European German DELL who responded very quickly by there DELL Forum and help me great to go again. Thank you DELL-Dave S.
    Problem solved by:
    followind drivers downloaded from the CD, and then installed on D820
    WLAN: HTTP://WWW.DELL.COM/SUPPORT/DRIVERS/DE/DE/DEBSDT1/DRIVERDETAILS/PRODUCT/LATITUDE-D820?DRIVERID=R257701&OSCODE=WW1&FILEID=2731111614&LANGUAGECODE=DE&CATEGORYID=NI.
    LAN: HTTP://WWW.DELL.COM/SUPPORT/DRIVERS/DE/DE/DEBSDT1/DRIVERDETAILS/PRODUCT/LATITUDE-D820?DRIVERID=04VK6&OSCODE=WW1&FILEID=2731090506&LANGUAGECODE=DE&CATEGORYID=NI.
    Now using Ethernet and wireless network worked with access to the network, all the others downloaded drivers from the net.
    Viva

  • vSwitch ESXi 5.1 workaround to virtual machines (direct access to the network)

    Hello world!

    I have a server running properly the 5.1 ESXi hypervisor and got inside the physical grid active router with DHCP. How can I configure the vSwitch on ESXi 5.1 work not managed on the network, without VLAN and have direct access to the network?

    Just to clarify, I would like to first of all virtual machines VMware Workstation works - if it is possible to run several virtual machines and define all NICS (Network Interface Card) as connected by a bridge, that is to say. Each VM gets the specific configurations of IP to the external router.

    Since now, thank you very much for the help!

    Best regards

    Eduardo

    With ESXi the vSwitches work comparable to Bridged networking, so there is really nothing special to do.

    André

  • Risky to allow access to the network storage and LAN VM?

    What kind of risks could we be exposing our storage network to if we had to assign a VM with network cards on the LAN and SAN?

    Hello

    Moved to the security forum.

    The operating risk is quite minimal.

    Not quite true. iSCSI and NFS protocols are clear! So, it would be possible to do a number of things (ARP Cache poisoning comes to mind) to allow the storage of data flow to a compromised host. A colleague recently made a demo just that. It's actually pretty trivial to do with the right tools.

    The surface of attack before being reduced by limiting the number of machines that extend over these networks.

    That's right, the upper limit of this should really be 0 however for better security. Not only that, if the SAN is really an iSCSI server, this server may be used to attack the service console depending on how the supreme court was also connected to the storage network. You have now increased possible points of attack for the SC of 1 or more.

    You also want to ensure that the network is not routed, while the network is not available from other machines not directly connected to the San.

    Altogether.

    The risk that you open is that an admin would have access to data storage.  That's what you try to avoid.

    If the host which can extend over your LAN and SAN is compromised, then it might be possible for ALL users on the system to get the storage data when it runs on the San.

    The best solution is that if you have a virtual machine or server that fills these networks that they fill in fact to an IP storage device that is not used by ESX hosts, the only exception to this might be the VCB Proxy, but you need to ensure as well if not better than your ESX hosts themselves. Make sure that it is in a protected space, etc.

    Best regards, Edward L. Haletky VMware communities user moderator, VMware vExpert 2009, url = http://www.dabcc.com/channel.aspx?id=279DABCC analyst [url]
    "Now available on Rough Cuts: url = http://www.astroarch.com/wiki/index.php/VMware_Virtual_Infrastructure_Security' VMware vSphere (TM) and Virtual Infrastructure Security: ESX security and virtual environment ' [url]
    Also available url = http://www.astroarch.com/wiki/index.php/VMWare_ESX_Server_in_the_Enterprise"VMWare ESX Server in the enterprise" [url]
    [url =http://www.astroarch.com/wiki/index.php/Blog_Roll] SearchVMware Pro [url] | URL = http://www.astroarch.com/blog Blue Gears [url] | URL = http://www.astroarch.com/wiki/index.php/Top_Virtualization_Security_Links Top security virtualization [url] links | URL = http://www.astroarch.com/wiki/index.php/Virtualization_Security_Round_Table_Podcast Virtualization Security Table round Podcast [url]

  • From Firefox blocks all access to the network

    When I start Firefox (41.0.1), all access to the network is completely blocked. Before you start the FF, I can access the Internet (with Chrome or IE), other computers, but as soon as I launch Firefox, all access to the network (including the connection to other computers) is blocked. In addition, my computer will turn off more.

    As far as I KNOW, I have not installed lately extensions or add-ins.

    Thank you for your resolution. Today, when I mentioned to work, I was told to update Firefox. This seems to do the trick (so far, fingers crossed!).

    (https://support.mozilla.org/en-US/kb/refresh-firefox-reset-add-ons-and-settings) so very probably an extension is causing harm.

    When this isn't ' t the resolution, I will surely return to your resolutions.

  • Adapter LAN question, "no access to the network.

    Original title: LAN adapter issue

    Hi all, when connecting my laptop to a switch of the LED on the switch is green which means connected. The IP address on the laptop is entered manually, but when will the cmd and issue ipconfig it shows "media disconnected" and the network adapter in the Control Panel indicates "no access to the network. It also indicates that "this device is working propoerly! Please advice

    Hello

    What is the number and the model of the computer?

    Remember to make changes to the computer before the show?

    Thanks for posting in Microsoft Communities.  The problem description, I understand that you can not connect to the Internet.  Correct me I misunderstood the question

    Follow these steps:

    Method 1: Follow these steps:
    How to troubleshoot possible causes of Internet connection problems in Windows XP:
    http://support.microsoft.com/kb/314095

     

    Method 2: Follow these steps:


    Step 1:
    renew DHCP Dynamic Host Configuration Protocol)
    a. click Start, click run, type cmd and click OK.
    b. in the command prompt, type ipconfig / renew
    c. Close command prompt.
    d. check the result.

     

    Step 2: Try to obtain an IP address automatically
    a. open Internet Explorer, go to Tools, click on Internet Options, connections, LAN settings.

    b. uncheck all boxes except automatically detect connection settings
    c. click OK to apply the changes.
    d. check if the problem persists.

     

    Method 3: If the methods above do not help, check if the wireless card is very well and try to update the drivers on the manufacturer's Web site.

    a. click Start and right-click my computer.
    b. Select Properties and then click the hardware tab.
    c. click on Device Manager and expand network adapters in the list.
    d. right click on the adapter, then click Properties.
    e. click the driver tab and click Update the driver.

    Please follow the steps and let us know if this helped.  If the problem persists, answer and we will be happy to help you.

  • How to restrict access to the drive of Wndows xp sp3?

    I have 3 user account on my computer, it is has the administrator rights and the other is a standard user account.

    I want to restrict access to all readers for the standard player.
    I used gpedit.msc to enable the administrative model, but it also limits the account admin and me to access the road
    OS: windows XP SP3
    Please advice
    Hi Utkarsh.Ranjan,
     
    If you want to restrict access to a drive by using the Group Policy Editor, you can not apply for a particular user account. This will change for the user accounts.
     
    You can't restrict access to the complete transmission. However, you can resrtict access to folders and files inside a car to a particular user.
     
    Refer to the section "set, view, change, or remove special permissions for files and folders" in the following article and follow the steps to remove the authorization of the user access to the file/folder.
  • "No access to the network" problem in Windows 7 and error message "your computer seems to be correctly configured but the device or resource (DNS SERVER) is not responding."

    Hello, I have a desktop PC and a laptop (DELL Inspiron N-4050).
    I have problem with my internet connection cable which is working fine on my PC, but does not not on my laptop giving an error "no access to the network.

    When I troubleshoot it says "your computer seems to be correctly configured but the device or resource (DNS SERVER) is not responding."
    I said to many technicians of microsoft online response, but they could not solve my problem and said this is my DNS problem and advised me to contact my Internet service provider. Guess it's because of my internet so why it works on my PC not on laptop?

    Yesterday, my ethernet cable pulled out my cell phone and I couldn't connect to the internet more. But on my desktop PC, it works perfectly fine. (I do not use wifi, if this information is also required) I have studied several threads with similar situations, and I have tried different methods to solve the problem to no avail. I did a system restore, but I'm having no luck. Also, I did not of the latest changes with my anti virus software and my LAN card drivers look to date.

    When I remove my cable from the laptop and again connect my cable then it works but only after the PC sat for awhile.
    1.I did flush DNS by typing "ipconfig/flushdns" in the command prompt.
    2. my IP address, DNS, subnet mask etc are set to automatic.
    3.I also added physical address taken from command line giving "ipconfig/all". for the properties of the network driver settings.
    4.I ' installed the drivers to date of 2014 on my laptop.
    5.I did a lot of searching the web, but they do not solve my problem.

    Please help me to solve it.
    I appreciate your help.
    Thank you.

    Hello Hall,

    Please keep us updated on the status of the issue.

    I suggest you to follow the steps in this Microsoft article troubleshooting and check if it helps:

    Error message "your computer seems to be configured correctly, but the device or resource (DNS server) is not responding" in Windows 7

    http://support.Microsoft.com/kb/2779064/en-us

    Hope the helps of information.

    Please reply with the results, in order to help you solve the problem.

    Thank you

  • Update Windows 7 pro (10 users) network January 1, 2013. Now, for more than 4 users connect an access across the network apps stop apparently. Any thoughts?

    Update Windows 7 pro (10 users) network January 1, 2013.

    Now, for more than 4 users connect an access across the network apps stop apparently.

    Any thoughts?

    Hello

    Your question is beyond the scope of these forums. Please ask your question in the following forum.

    Windows 7 networking:

    http://social.technet.Microsoft.com/forums/en-us/w7itpronetworking/threads

    Concerning

  • How to restrict access to the service web application deployed on weblogic for user group only

    I built the web service application in jdevelopler 11.1.1.7. Their security policy applied in the web service of the default Oracle policy which is (policy: Wssp1.2 - 2007-Https-UsernameToken - Plain.xml)

    Now all want to access the web service application must provide the name of user and password in the header section of the SOAP request to meet the requirement of the policy.

    the following steps I'm trying to restrict access to the application of web service with a specific group of users among users of weblogic:

    Connect to the weblogic administration console

    Create user or group of users

    Click on the links of deployments

    Select your web service

    Click the Security tab

    Click the sub-tab political

    Choose your authorization provider in the menu drop-down (looks like by default)

    Choose Add Conditions-> Group-> Type in the name of the Group

    Finishing

    But access is always available for all weblogic users (IE users not in the group specified in the above security configuration). How can I restrict access to only authorized group? Any thing lacking in my approach?

    There is nothing wrong with the steps mentioned in the question. In addition, you must do the following

    At the time of the application deployment with regard to the security part, there is a list in the title of the question (which security template you want to use with this application?)

    You must select (Advanced: use a custom template that you have configured on the page of configuration of the Kingdom) a configuration mentioned in the question will be work

  • Restrict access from the view of external endpoint

    Hello world

    I got an interesting question to come today: is it possible to restrict access to the view of physical endpoint?  This client does not support BYOD somehow and provided instead of thin laptops HP for their users access to the view since then at home, via a security gateway.  I know that you can disable the web interface from view completely, but they seek to block connections to nothing but these thin laptops.  Thank you!

    Here's a more recent document - https://www.vmware.com/files/pdf/VMware-View-KioskMode-WP-EN.pdf

  • Access to the network bridge works do not (Linux host & comments)

    I am running VMware Player 3.0.1 on Fedora Core 10. (I know this is not one of the host of the OS supported; could this be the problem?)

    I built a virtual machine with a virtual adapter connected by a bridge and am under Fedora Core 10 also in the virtual machine. The virtual machine does not have any network access.

    I followed all the advice of troubleshooting to the Knowledge Base article 1008367 (at http://kb.vmware.com/selfservice/microsites/search.do?cmd=displayKC & docType = kc & externalId = 1008367 & sliceId = 1 & docTypeID = DT_KB_1_1 & dialogID = 77717080 & stateId = 0% 200% 2077715760) does not.

    On the Linux host, vmnet-bridge is running.

    / dev/vmnet0, / dev/vmnet1 and/dev/vmnet8 all exist.

    However, the Configuration GUI network (under GNOME) lists vmnet1 material devices, vmnet8, eth0 (it's my actual physical network interface), and the so-called pan0.

    On the virtual machine, I think I have configured the network correctly.

    ping an address on my LAN IP said "the network is inaccessible." (The same ping succeeds on the host).

    Clues to understand why the network access doesn't work?

    Ok

    Start by checking that the Fedora 10 vNIC is connected on the audit: VM configuration-> network adapter Bridge-> Connect at power on (must be verified).

    So when the guest of Fedora 10 begins the vNIC should be upward.

    If the eth0 is not upward, you should be able to install and configure then. You can search on the net how to set up the network on a host of Fedora 10. I recommend that you use just the console text to do so.

    Don't forget to configure fedora network depending on the configuration of your LAN (static or dhcp).

    Let me know if it works or not

    Best wishes / Saludos.

    Pablo

    Please consider providing any useful answer. Thank you!! - Por favor considered premiar las useful responses. ¡¡MUCHAS gracias!

    Virtually noob blog

Maybe you are looking for

  • 12.3.2 iTunes - bought 'content check' alone!

    Having problems with iTunes 12.3.2 - purchased content started to 'check' itself on its own... I first noticed when syncing my iPhone - I realized that he began to synchronize an additional 1,000 songs on my device. It's extremely frustrating because

  • Web cam or NOT

    My laptop is just more warranty and more when I tried the other day to ask this simple question to what the person in India has hung up on me. My sheet of statistics shows that I have a webcam and microphone at the top.  It shows the photos. So I ins

  • Visucal Microsoft C++ runtime library Runtime Error!

    Hello!  After you install a device on my computer at home, he started running super slow.  So, I began stupidly delete presumable unnecessary files to try to remove the device driver.  In the process, I must have deleted something needed to run Micro

  • How can I change the image of the cursor?

    CURSOR IMAGE HOW CAN I CHANGE? I NEVER HAD PROBLEM BEFORE?

  • portable computer keyboard failure

    I have a Toshiba laptop with vista home premium 64 bit. I have no use my keyboard except at the connect, after which I have to use the keyboard to the screen through easy access. I ran virus scans, various programs to repair and nothing works. Any su