Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I want to restrict the access into my server on MAC Address base over internet... does it possible??? or there any other way of restriction over internet instead of IP address possible??

(My users are connection into my adito base ssl vpn server and i want to give them access on base of MAC address or any other possible method not by there IP address...because they are on roaming Internet IP.

thanking you, sahil.

share|improve this question
add comment

1 Answer

It is not possible to do mac address filtration over the Internet. MAC address is Ethernet address and remote point doesn't receive client's MAC address. I think the best way here - give every user separate username/password to your application, and change permissions based on it.

share|improve this answer
    
thanx buddy, i already have configured username/password for access...but beyond this i also want extra security for client restriction like Mac address base or any other method –  sahil Mar 29 '10 at 6:48
    
Then you can try to implement more complex algorithms for your VPN connection –  Dmitry Trukhanov Mar 29 '10 at 6:53
1  
If you want to identify the clients apart from their username and password, think about using client side certificates. –  joschi Mar 29 '10 at 6:54
1  
I agree with @joschi -- client certs with password-wrapped private keys approaches 2-factor security -- something you have (the cert's private key) and something you know (the password to decrypt it). –  Spiff Mar 29 '10 at 6:59
    
great buddy, any more info how i can install and use client side certificates ?? –  sahil Mar 29 '10 at 7:39
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.