On Wed, 13 Feb 2002, Brett Lymn wrote:

> Depending on how much work you want to do you can manually fill the
> arp cache with IP/Mac address pairs.  That way they will have to steal
> the network card or reprogram the MAC on the network card...

One second online when the legitimate address holder is there gets you 
the MAC address.  Port latching MAC addresses on switches is probably a 
higher-win situation if you're going to do the administrative overhead 
anyway.

Paul
-----------------------------------------------------------------------------
Paul D. Robertson      "My statements in this message are personal opinions
[EMAIL PROTECTED]      which may have no basis whatsoever in fact."

_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls

Reply via email to