Burned Switch

is it possible to burn switch by the user who change programatically MAC
address of his adapter and then he receives ip address granted by dhcp
server which does not belong to him. This IP may or may not be used actually
by the other user of this MAC Address. How to track this user?

ambler wrote:

> is it possible to burn switch by the user who change programatically MAC
> address of his adapter and then he receives ip address granted by dhcp
> server which does not belong to him.

No.

--

Fundamentalism is fundamentally wrong.

To reply to this message, replace everything to the left of "@" with
james.knott.

ambler <(E-Mail Removed)> wrote:
> is it possible to burn switch by the user who change programatically MAC
> address of his adapter and then he receives ip address granted by dhcp
> server which does not belong to him. This IP may or may not be used actually
> by the other user of this MAC Address. How to track this user?

Basically, no. If you need this sort of protection, you would need to
get a switch that supports authentication, using RADIUS or similar. This
would cost a considerable amount of money.

If you want to log the MAC addresses that clients are using, you may
have some measure of success with arpwatch. Manageable switches may be
able to be queried for the MAC address to port mappings.

If an ethernet wall-socket is not it use, it is common practice to make
that port off-line (unplugging it from the switch to which it is
connected. This can help to mitigate the risk involved, but not by much.

--
Cameron Kerr
(E-Mail Removed) : http://nzgeeks.org/cameron/
Empowered by Perl!

On Thu, 26 Feb 2004 09:37:16 +0100, ambler wrote:

> is it possible to burn switch by the user who change programatically MAC
> address of his adapter and then he receives ip address granted by dhcp
> server which does not belong to him. This IP may or may not be used actually
> by the other user of this MAC Address. How to track this user?

On certain switches (definitely on Cisco, not sure on others), you can
lock down switch ports to only allow specified MAC address(es) to use the
port.

Saundo
--
Chris "Saundo" Saunderson (E-Mail Removed)
Unix/CCNA/CCDA Guy Powered by Linux and the Orb.