Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How can I limit the network access to a physical network from outside computers being plugged in? I know MAC filtering is one way, VPN is another - but it's not going to be used, so what else?

share|improve this question

migrated from May 26 '11 at 0:35

This question came from our site for professional and enthusiast programmers.

MAC filtering only works for people who don't know how to sniff the network for a valid MAC and spoof it; so almost no security at all.

802.1x works pretty well if your switches support it and you setup the infrastructure for it.

share|improve this answer

if your physical network is using a CISCO router or switch you can use the Port Security feature to fulfill your task. But the underlying feature will still be filtering based on MAC addresses.

share|improve this answer

If you're in a windows environment you can look into NAP (Network Access Protection).

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.