Since when does DHCP enforce an IP address?
You can configure it to always give the same IP to a particular MAC,
however this dosn't stop a malicious user with 1/10th of a clue :D
As Gavin Hamill suggested, iptables rules would be perfect to do things
like 'only accept traffic from this IP if it originates from this MAC'.
-Shaun
Karl Brose wrote:
You should use DHCP to enforce IP address to MAC binding when the
phones boot.
And then let the phones register and use host access (deny/permit)
permissions in peer section to restrict by IP address/mask.
alan wrote:
Gavin Hamill <[EMAIL PROTECTED]> wrote:
On Monday 13 June 2005 16:42, alan wrote:
I'm currently evaluating the Sipura SPA-841, and snom 190 phones
for use
in an Asterisk PBX/call center environment.
<snipped>
enforce SIP channel IP restrictions in Asterisk without
"host=<ipaddr>", or get the snom 190 to stop complaining when it's not
registered
</snipped>
How about tackling this with iptables and matching specific IP
addresses on
specific MAC addresses?
This solves part, but not all, of the problem.
This ensures that only authorized devices can connect to asterisk, and
that their IP addresses are also correct. But it doesn't force
each device to use only its assigned sip channel.
(That is: with dynamic IP registration, a valid IP/MAC could be
configured with another device's SIP registration information, and steal
calls which should be going to the other device.)
I suppose iptables in combination with sip secrets should be enough.
But realistically, I can already do what I want the way I want to do it,
with the SPA-841. I mostly need to decide: if this feature is lacking,
is it enough for me to prefer the Sipura over the snom?
Thanks again,
Alan Ferrency
pair Networks, Inc.
[EMAIL PROTECTED]
_______________________________________________
Asterisk-Users mailing list
[email protected]
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users
_______________________________________________
Asterisk-Users mailing list
[email protected]
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users
_______________________________________________
Asterisk-Users mailing list
[email protected]
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users
