[K12OSN] deny IP based on MAC address....how?

[David Trask]

"Support list for opensource software in schools." <k12osn at redhat.com> on
Sunday, October 03, 2004 at 10:32 PM +0000 wrote:
>We run into this exact issue all the time.  You've got Amer.com 
>switches, right?  You can block that MAC address in the switch, at their 
>switch port.  Thus, if they try statically assigning themselves an IP 
>address, it won't matter.  :-)  Of course, they could go walking around 
>till they find a drop that doesn't block them (we have people do this 
>all the time).  So, you also block their MAC at the right Gigabit trunk, 
>i. e. the one right before you get to the segment with the 
>router/important servers, and they can't do nada!  Then they *have* to 
>come to you and get themselves disinfected.

Awesome idea!  Boy am I going to have fun with this!

David N. Trask
Technology Teacher/Coordinator
Vassalboro Community School
dtrask at vcs.u52.k12.me.us
(207)923-3100