Comments on: Locking the IP address to the MAC address http://itknowledgeexchange.techtarget.com/itanswers/locking-the-ip-address-to-the-mac/ Sat, 28 Nov 2009 12:20:14 +0000 http://wordpress.org/?v=2.6.2 By: Petkoa http://itknowledgeexchange.techtarget.com/itanswers/locking-the-ip-address-to-the-mac/#comment-64456 Petkoa Mon, 15 Jun 2009 16:57:47 +0000 #comment-64456 Hi Mohdanwarahmed, It's cool to assign fixed IP's to specific PCs, but don't assume that this DHCP solution is of any security significance... Anybody willing to circumvent your settings could do it by (1) wire-tapping the MAC of the "good" PC (its NIC, in fact) - e.g., by tcpdump; and (2) setting his/her PC's (NIC, again) MAC to the wire-tapped in an appropriate moment - when the "good" PC is off-line. Nowadays almost any NIC/driver combination allows for this. But, if you are setting IPs like this in a trustworthy and friendly environment... well, there are some benefits (I, personally did use and still use them), you probably thought them over, if you are asking about this kind of setup. BR and good luck, Petko Hi Mohdanwarahmed,

It’s cool to assign fixed IP’s to specific PCs, but don’t assume that this DHCP solution is of any security significance… Anybody willing to circumvent your settings could do it by (1) wire-tapping the MAC of the “good” PC (its NIC, in fact) - e.g., by tcpdump; and (2) setting his/her PC’s (NIC, again) MAC to the wire-tapped in an appropriate moment - when the “good” PC is off-line. Nowadays almost any NIC/driver combination allows for this.

But, if you are setting IPs like this in a trustworthy and friendly environment… well, there are some benefits (I, personally did use and still use them), you probably thought them over, if you are asking about this kind of setup.

BR and good luck,

Petko

]]>