Re: BRIDGE HELP

Peter Volkov <[email protected]> Fri, 11 Jan 2008 13:48:30 +0300
Newsgroups gmane.linux.network.bridge.ebtables.user
Message-ID <1200048511.20052.14.camel@localhost>
В Птн, 11/01/2008 в 05:50 +0000, AA Inter.Network Services / SYED
JAHANZAiB пишет: 
> More importantly, how can this be done in simple way, because I have
> to allow/modify/deny various users on daily basis, so is there a way I
> can edit any single file lets say /etc/macallowed , and there entries
> should be like,
>  
> 00-08-74-4D-74-DE   10.0.0.2  # John B-303 Sunview Appartments
> 00-02-74-D2-74-F3   10.0.0.3  # Arnold 402 Aone Bunglows
> And so on . . .
> 
> how can I tell ebtables to read from the specific file ? and how to
> setup entries in DHCP ? Can this be done via editing single file ?

Just generate dhcp config file and ebtables.sh (or better file for
ebtables-restore) from your text file.

But remember that it's always possible to spoof mac address. So if you
do not have enough smart switches with port security which allow you
physically bind one port - one client, you should authenticate/authorize
your users by other means: VPN, pppoe, etc...

-- 
Peter.

-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace

_______________________________________________
Ebtables-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ebtables-user
signature.asc (application/pgp-signature, 189 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.7 (GNU/Linux)

iD8DBQBHh0l+z6tlgEWSarMRArOxAJ9c3pytFt8ENTM/4FMt6JOTW8x2fwCfcDQ2
JydcNSLq0rIKk4Q/T3sfeHw=
=3tcw
-----END PGP SIGNATURE-----