Date: Mon, 8 Sep 2003 12:07:33 +0300 From: "Yonatan Bokovza" <Yonatan@xpert.com> To: <freebsd-questions@freebsd.org> Subject: RE: Binding MAC to IP Statically Message-ID: <C2DC75EEA405354AA9C03EF5CB8CDE089AAB3E@exchange.xpert.com>
next in thread | raw e-mail | index | archive | help
> -----Original Message----- > From: Chuck Swiger [mailto:cswiger@mac.com] > Sent: Sunday, September 07, 2003 23:10 > To: Colin Watson > Cc: freebsd-questions@freebsd.org > Subject: Re: Binding MAC to IP Statically >=20 >=20 > Colin Watson wrote: > [ ...rewrapped to 80-columns... ] > > Any way to bind a MAC address statically to an IP?. I wish=20 > to do this to > > prevent a user from changing his IP address on the subnet,=20 > so if he does he > > can't pass traffic. I have experimented with ipfw, but I=20 > can't quite see how > > I could accomplish the binding of a IP statically to a=20 > nic's MAC. Any ideas > > be appericated. >=20 > IPFW2 lets you perform firewall actions on a MAC address,=20 > rather than an IP. >=20 > You can configure a DHCP server to staticly allocate an IP=20 > address to that=20 > machine via something like this in {/usr/local}/etc/dhcpd.conf: >=20 > host pi.codefab.com { > hardware ethernet 00:00:00:00:00:00; > fixed-address 66.234.138.67; > } Look for static arp. The basic idea is that you tell your interface to not use arp (see ifconfig(8) -arp) and give it a static binding of MAC addresses to IP addresses (see arp(8) -f).
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?C2DC75EEA405354AA9C03EF5CB8CDE089AAB3E>