deny mismatch ip to mac-address

Unanswered Question
Feb 18th, 2007


I need to configure an access-list that will permit a workstation to browse specific website only and will deny all traffic.

The router is configured as the dhcp server. I will create an ip-to-macaddr reserveration for that workstation.

What I need to do is to block the workstation if the mac-address is not corresponding to a specific ip address because he might configure a static ip address that will give him access to all resources.

please help. thanks.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
criss_noh Wed, 02/21/2007 - 16:05

To prevent from static IP address, you should use DHCP snooping including ARP inspection.


This Discussion