0

I want to restrict the access into my server on MAC Address base over internet... does it possible??? or there any other way of restriction over internet instead of IP address possible??

(My users are connection into my adito base ssl vpn server and i want to give them access on base of MAC address or any other possible method not by there IP address...because they are on roaming Internet IP.

thanking you, sahil.

1 Answer 1

2

It is not possible to do mac address filtration over the Internet. MAC address is Ethernet address and remote point doesn't receive client's MAC address. I think the best way here - give every user separate username/password to your application, and change permissions based on it.

5
  • thanx buddy, i already have configured username/password for access...but beyond this i also want extra security for client restriction like Mac address base or any other method
    – sahil
    Mar 29, 2010 at 6:48
  • Then you can try to implement more complex algorithms for your VPN connection Mar 29, 2010 at 6:53
  • 1
    If you want to identify the clients apart from their username and password, think about using client side certificates.
    – joschi
    Mar 29, 2010 at 6:54
  • 1
    I agree with @joschi -- client certs with password-wrapped private keys approaches 2-factor security -- something you have (the cert's private key) and something you know (the password to decrypt it).
    – Spiff
    Mar 29, 2010 at 6:59
  • great buddy, any more info how i can install and use client side certificates ??
    – sahil
    Mar 29, 2010 at 7:39

You must log in to answer this question.