Comments on: How to avoid a server from using an unauthorized IP ? http://itknowledgeexchange.techtarget.com/itanswers/how-to-avoid-a-server-from-using-an-unauthorized-ip/ Wed, 22 May 2013 18:27:48 +0000 hourly 1 By: kuteninja http://itknowledgeexchange.techtarget.com/itanswers/how-to-avoid-a-server-from-using-an-unauthorized-ip/#comment-76613 kuteninja Thu, 29 Apr 2010 14:06:14 +0000 #comment-76613 WebView does have an ACL panel, with “IP based ACL” and “MAC based ACL”, but it doesn’t let me specify the ACL to just one port of the switch, so if I do that, I won’t be able to use that IP on any other server unless I remove the ACL block.

The MAC based ACL let me do that with a VLAN ID, but it’s kinda easy to hide the network card MAC by masking it.

I’m next to buy a new switch. Do you recommend me to get a better one? In that case, which one would be good and allow me to do what I want?

]]> By: kuteninja http://itknowledgeexchange.techtarget.com/itanswers/how-to-avoid-a-server-from-using-an-unauthorized-ip/#comment-76612 kuteninja Thu, 29 Apr 2010 14:00:34 +0000 #comment-76612 The Linksys switch doesn’t come with a server console, but it does have a crappy WebView panel (which only works almost decently on IE). Let my try it, and I’ll come back.

]]> By: kuteninja http://itknowledgeexchange.techtarget.com/itanswers/how-to-avoid-a-server-from-using-an-unauthorized-ip/#comment-76590 kuteninja Wed, 28 Apr 2010 18:35:00 +0000 #comment-76590 (Sorry about the html tags, I’ve copypasted from another site, this is the question:)

I don’t know for sure how to ask for it, so I’ll explain it to you first:

- I currently have a Linksys SRW224G4 switch, in which I have connected 10 servers.
- From those, 9 servers are ours, and the other one is from one of our clients.
- We have 27 IP addresses available; and only 12 currently being used (plus, the gateway), a total of 30.

What I need to do is that my client’s server, CANNOT use an IP address, different from the one I’ve assigned to him.

One of my friends, told me that this could be done by assigning a VLAN to the server’s port, and use netmasks to block the traffic; but my Switch doesn’t let me do anything to the VLAN’s other than adding or removing ports to it, it has no networking setup and I don’t have a console access other than the extremely basic telnet/ssh menu and the WebView. Also, I have no access to the Gateway (it’s controlled by my provider), and I haven’t installed a Router yet.

Is it possible to do this with just the Switch? (eg. with ACL’s or something like that)
Or I’ll need to get a Cisco Router to do the VLAN’s IP address control?

]]>