On Mon, Nov 29, 2010 at 4:51 AM, James Bensley <[email protected]> wrote: > I think it would be an useful feature to have; if you have a pfsense box at > the end of a leased line, private virtual circuit or vpn, it would be good > to check the device at the other has x MAC address to try and rule out any > security features like a MITM attack or something like that... >
If you're concerned about that, you need something cryptographically secure - a VPN across it, not relying on something trivial to change. Anyone smart enough to MITM a private circuit is most certainly going to be able to spoof a MAC address. On Mon, Nov 29, 2010 at 9:32 AM, Ryan Rodrigue <[email protected]> wrote: > Is there a way to manually specify an IP to a mac in the ARP tables. You can enforce static ARP on an interface. --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected] Commercial support available - https://portal.pfsense.org
