Given a network structure like this:
client 1 \ . \ . switch -- firewall . / client n /
(in words: all clients connected to one switch and the switch connected to the firewall)
Is it possible (on the firewall) to identify the physical port on the switch that a client used?
Background: There's some simple MAC authentification for the clients, there can only be 1 person responsible for what happens an a switch port (because there is just one RJ45 connector per room and 1 person who owns the room). However, it would be possible to fake the MAC address, then I wouldn't know from which room the data is coming, however I need to know this for sure in case of abuses. Is this possible without vlans? Thanks for any hint!