Hi Dodger,
Don't use MAC authentication if you can't trust the MAC.
Use something like WPA2-Enterprise with computer or user authentication 
(presumably against a directory server).

Otherwise be very restrictive about which VLAN you place MAC authenticated 
devices into.

Regards,
--
Louis Munro
[email protected]  ::  www.inverse.ca 
+1.514.447.4918 *125  :: +1 (866) 353-6153 
Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence 
(www.packetfence.org)

On 2014-01-10, at 8:23 , Dodger <[email protected]> wrote:

> Hi,
> 
> We are currently evaluating pf for a customer.
> 
> one question popped up:
> 
> there are lots of Apple MBAs that get ethernet connectivity either via an 
> Tuhunderbolt/USB to Ethernet Adaptor or a hub integrated into an Apple 
> Display. 
> 
> those have own independent MAC Addresses, but are easily misused by foreign 
> devices.
> 
> has anybody dealt with that before? its the same with PC Ultrabooks without 
> own ethernetport. 
> 
> any idea is highly appreciated,
> 
> best,
> 
> dodger
> 
> ------------------------------------------------------------------------------
> CenturyLink Cloud: The Leader in Enterprise Cloud Services.
> Learn Why More Businesses Are Choosing CenturyLink Cloud For
> Critical Workloads, Development Environments & Everything In Between.
> Get a Quote or Start a Free Trial Today. 
> http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk_______________________________________________
> PacketFence-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/packetfence-users

------------------------------------------------------------------------------
CenturyLink Cloud: The Leader in Enterprise Cloud Services.
Learn Why More Businesses Are Choosing CenturyLink Cloud For
Critical Workloads, Development Environments & Everything In Between.
Get a Quote or Start a Free Trial Today. 
http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to