i'm facing a strange request my client have done to me and i would like some help. He ask me to put a probe in promiscuous mode in my ced between my network and the mpls than connect us and them for sniffing voip packet and analyze registration on rtp channel.

In my opinion this is a security issue, beacuse once it capture the source packet of my network and there are ton of possibility of attack like spooffing, ARP poisoning ect ect

i have an hp switch Switch HPE OfficeConnect 1950 so i thought of enable promiscuous mode on the interface but enable also somethink like ip/mac binding:

ip source-binding vlan interface

Is this enough for you?

Thank for the advice.

  • You need a firewall in between networks, letting only defined traffic pass. Anything MAC-based can be easily spoofed and is useless. – Zac67 Jun 19 at 13:28

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.