Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 07 Sep 2003 16:09:42 -0400
From:      Chuck Swiger <cswiger@mac.com>
To:        Colin Watson <sb.mailinglist@lambdabroadband.com>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: Binding MAC to IP Statically
Message-ID:  <3F5B9086.9020404@mac.com>
In-Reply-To: <00aa01c3757a$bf2b9430$0b4e1151@blackbox>
References:  <00aa01c3757a$bf2b9430$0b4e1151@blackbox>

next in thread | previous in thread | raw e-mail | index | archive | help
Colin Watson wrote:
[ ...rewrapped to 80-columns... ]
> Any way to bind a MAC address statically to an IP?. I wish to do this to
> prevent a user from changing his IP address on the subnet, so if he does he
> can't pass traffic. I have experimented with ipfw, but I can't quite see how
> I could accomplish the binding of a IP statically to a nic's MAC. Any ideas
> be appericated.

IPFW2 lets you perform firewall actions on a MAC address, rather than an IP.

You can configure a DHCP server to staticly allocate an IP address to that 
machine via something like this in {/usr/local}/etc/dhcpd.conf:

host pi.codefab.com {
         hardware ethernet 00:00:00:00:00:00;
         fixed-address 66.234.138.67;
}

-- 
-Chuck



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3F5B9086.9020404>