IP Spoofing

[travis-dennis_2]

I know it is very easy to spoof an IP address from the outside of a network. How hard is it to spoof a MAC address or when you spoof the IP address are you spoofing the MAC address as well? I want to set up my 3524 switches to only allow specified MAC addresses through. The logistics are not a problem as we are a smaller company. I want to know would I be wasting my time gathering the MAC addresses and putting them in the switches if the MAC addresses can be as easily spoofed as an IP address.

[jbaigorr]

From my experience, MAC address spoofing can be done. I've seen it done mostly in cable environments.

If possible, create access-list on your router with known spoofed ip's. It might be easier than gathering all your MACs on your network.

Cheers,

Gonzalo