[NTLUG:Discuss] How do you secure a LAN?

[Alton R. Pouncey, II]

On Sun, 2002-12-29 at 18:41, Bob Byron wrote:
> How do you secure a LAN?  Not every point of access is under my 
> complete control.
> 
> I want to make sure that no one connects any PCs that I don't know
> about to the company LAN.  What is the best way to secure it?  Ideally,
> I would like to have the LAN setup to do DHCP, however, with a user 
> name and password required to register with DHCP.  But, since that
> is not possible (that I know of), I am open for suggestions.
> 
> Thank You,
> Bob Byron
> 
> _______________________________________________
> https://ntlug.org/mailman/listinfo/discuss

If your company has Cisco switches (I am only familiar with the
following feature on Cisco products, don't know if it exists on others)
you can set the switches up so that the ports are locked to the hardware
address of the system currently on them.  This prevents other hardware
addresses from connecting to that particular port.

But, of course, as has been mentioned by others, this type of security
can be circumvented.  In the end, your LAN is no more secure than the
integrity of the humans using it.

-- 
Alton R. Pouncey, II
SCSA, SCNA, CCNA, CIW Professional
http://www.trainers-r-us.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 232 bytes
Desc: This is a digitally signed message part
Url : http://ntlug.org/pipermail/discuss/attachments/20021229/0dfa3fd4/attachment.bin