router securtiy

[dragec]

I want to limit 10 specific devices to route traffic over router. Can I achive this using statis arp entries somehow?

thanks!

[pkhatri]

Static ARP entries will simply mean that the router will not send out ARPs requesting the MAC addresses of these devices.

The better alternative is to simply use an access-list to explicitly permit traffic to/from IP addresses belonging to these devices.

Paresh

[dragec]

ok, so IP access list and static arp can make no other device with different MAC can use specific IP address?

[network.king]

Hi ,

I think it would be better for you to use both , mac address mapping to the ip address and using an access-list allowing the needed ips .This may restrict the users to change the ip of their own machines for accessing certain sites ,as the access-list would allow , but mac-address mapping would not allow.

Hope this helps.

regards

vanesh k