Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a debian server that acts as a router for a network, and I am planning on making it so I am able to block network access for certain computers, what do you think would be the best way to do it? I was thinking mac address filtering, although that could be spoofed. I was also thinking of IP filtering, but that could be avoiding just as easily. A few pages on google suggested doing something with arp tables, but im not sure how to go about doing that. Any help is much appreciated, thanks!

share|improve this question

marked as duplicate by Michael Hampton, Evan Anderson, John Gardeniers, Khaled, Iain Feb 16 '13 at 10:26

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

    
    
I'm not sure I'd go "not constructive" on this one. Exact duplicate is a better fit, I think. –  Evan Anderson Feb 16 '13 at 4:10

1 Answer 1

up vote 3 down vote accepted

You're looking for layer 2 authentication, as in IEE 802.1X, on your switches or wireless access points. There's nothing that you can do on a gateway device (router, firewall, etc) to prevent layer 2 or layer 3 "spoofing". You need an authentication mechanism that operates on the layer 2 device to authenticate trusted devices.

share|improve this answer
    
thanks for the info! –  lacrosse1991 Feb 17 '13 at 1:43

Not the answer you're looking for? Browse other questions tagged or ask your own question.