- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
LAN Access Policy - issue with linux
Hello everyone,
A new challenge appears, not sure if it's been asked already.
We're trying to limit accesses to wired LAN using Linux sstems.
As Linux cannot use Tags, is there a way to use computer names?
I see that the switches get the computer name when the computer is connected to the LAN port.
I could use MAC Address, but the problem is that we are using USB Dongles for LAN, since our computers don't have LAN ports. And if I put the USB dongle in another computer, said computer has access, so the security in this case is not working.
I would use MAC address lists for WLAN since the computers have a WiFi antenna.
Would it be possible to lock a LAN port to a specific computer name? or, any other good tip to solve this issue?
Thank you!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Decaone,
Unfortunately, locking a LAN port to a specific computer name directly is not typically supported, as network security mechanisms generally rely on MAC addresses or authentication protocols like 802.1x. However, you can consider the following options:
Point 1 - Port Security with MAC Addresses - You can assign secure MAC addresses to a port, ensuring that only devices with those MAC addresses can access the network.
-Sticky MAC addresses can be used to dynamically learn and retain MAC addresses, even during link-down conditions.
- Navigate to Switching > Monitor > Switches and select your switch. Enter up to 20 MAC addresses to allow on the interface and click Update (Documentation - Switch Ports).
Point 2 - 802.1x Authentication - Implement IEEE 802.1x authentication to control network access. This protocol authenticates devices before allowing them to connect to the network, using credentials rather than MAC addresses.
- Use certificate based auth for the clients
- Documentation - MS Switch Access Policies (802.1X)
Point 3 - Access Manager - Once it is available on your organization, you can participate in a free trial by opting-in to Access Manager on Early Access page (Organization > Early Access).
- Documentation - Access Manager - Architecture And Example Use Cases
- Documentation - Configure Wireless And Wired Networks To Use Access Manager
If you have any questions, please don't hesitate to contact us.
If my answer solved your problem, click "accept as solution" so that others can benefit from it.
