Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Computing > NZ Computing > Restricting Access to ADSL Modem

Reply
Thread Tools

Restricting Access to ADSL Modem

 
 
Chris Lim
Guest
Posts: n/a
 
      10-24-2008
I have a D-Link-G604T ADSL-2 modem and I want to restrict all access
(wired and wireless) by MAC Address. I've figured out how to do the
wireless part by creating an access list, but how do I restrict access
to the 4 ethernet ports to those same MAC addresses?
 
Reply With Quote
 
 
 
 
EMB
Guest
Posts: n/a
 
      10-24-2008
Chris Lim wrote:
> I have a D-Link-G604T ADSL-2 modem and I want to restrict all access
> (wired and wireless) by MAC Address. I've figured out how to do the
> wireless part by creating an access list, but how do I restrict access
> to the 4 ethernet ports to those same MAC addresses?


You don't. It's time to add a separate proxy of some sort to the mix.
 
Reply With Quote
 
 
 
 
Lawrence D'Oliveiro
Guest
Posts: n/a
 
      10-24-2008
In message
<7856ce6b-78cf-47cd-aba6->, Chris
Lim wrote:

> ... I want to restrict all access (wired and wireless) by MAC Address.


Is this really worth doing, considering how easy it is to spoof MAC
addresses?
 
Reply With Quote
 
Chris Lim
Guest
Posts: n/a
 
      10-24-2008
On Oct 24, 10:31*pm, Lawrence D'Oliveiro <l...@geek-
central.gen.new_zealand> wrote:
> In message
> <7856ce6b-78cf-47cd-aba6-e94872f8e...@z18g2000prn.googlegroups.com>, Chris
>
> Lim wrote:
> > ... I want to restrict all access (wired and wireless) by MAC Address.

>
> Is this really worth doing, considering how easy it is to spoof MAC
> addresses?


Well, the people who have physical access to the modem aren't that IT
savy so I'm not too worried about that (unless it's super easy to do,
I've never looked into it!).

I have a situation where someone doesn't want to contribute to the
internet bill in a shared house when they are the heaviest user, so if
it gets to the point where they refuse to pay then I want to make sure
they don't get internet access through their computer.
 
Reply With Quote
 
Chris Lim
Guest
Posts: n/a
 
      10-24-2008
On Oct 24, 11:26*pm, Collector€NZ <collector...@gmail.com> wrote:
> Chris Lim wrote:
> > I have a D-Link-G604T ADSL-2 modem and I want to restrict all access
> > (wired and wireless) by MAC Address. I've figured out how to do the
> > wireless part by creating an access list, but how do I restrict access
> > to the 4 ethernet ports to those same MAC addresses?

>
> Network security is not just a IT thing!
>
> Rule one is protect physical access to equipment
> Rule two put in a capable fire wall
> rule three don't trust your protection and monitor everything
>
> there are about 19 more rules.
>
> Tell us what you wish to achieve and we may be able to help.
>
> Now reading between the lines, making a few assumptions!
>
> You have a WiFi that is also your internal lan connection to the net
>
> you also have others that you allow to use this internally by ethernet
> (poor you)
>
> Come back with some details we will of course (not me no never me)
> lambast you and critic the situation but you will get some good advice


See my reply to Lawrence. Short story is shared accomodation, one
person doesn't want to contribute to internet bill and I may need to
stop them freeloading.
 
Reply With Quote
 
Chris Lim
Guest
Posts: n/a
 
      10-24-2008
On Oct 24, 11:42*pm, Collector€NZ <collector...@gmail.com> wrote:
> Turn on DHCP in your adsl router and deny there mac, or better deny all
> macs except those who contribute. Would not *stop me for more than a
> minute but if they are not It sav it will do, the only sure way is to
> disconnect the physical layer and protect that disconnection.


In the DHCP config there is a section under the Static IP config where
I can enter a list of IP/MAC address combo's. I tested it out by
limiting the internal IP range to 2 addresses (10.1.1.2 - 10.1.1.3)
and assigning a dummy MAC address to the one that was free (the other
was used by my computer). When I tried connecting (wirelessly) via my
PS3 the connection was successful and the spare IP address assigned,
even though the MAC address didn't match. So this list doesn't seem to
restrict access to just those IP/MAC address combo's for some reason.

> But surely if you have a non compliant person he/she should be gone


It's a weird situation, I won't bore you with the details!
 
Reply With Quote
 
Dave Taylor
Guest
Posts: n/a
 
      10-24-2008
Chris Lim <> wrote in news:7856ce6b-78cf-47cd-aba6-
:

> I have a D-Link-G604T ADSL-2 modem and I want to restrict all access
> (wired and wireless) by MAC Address. I've figured out how to do the
> wireless part by creating an access list, but how do I restrict access
> to the 4 ethernet ports to those same MAC addresses?
>


Yu do this upstream
http://www.ex-parrot.com/~pete/upside-down-ternet.html

--
Ciao, Dave
 
Reply With Quote
 
Lawrence D'Oliveiro
Guest
Posts: n/a
 
      10-24-2008
In message
<79ce3356-fad4-4a91-a229->, Chris
Lim wrote:

> On Oct 24, 10:31Â*pm, Lawrence D'Oliveiro <l...@geek-
> central.gen.new_zealand> wrote:
>
>> In message
>> <7856ce6b-78cf-47cd-aba6-e94872f8e...@z18g2000prn.googlegroups.com>,
>> Chris Lim wrote:
>>
>>> ... I want to restrict all access (wired and wireless) by MAC Address.

>>
>> Is this really worth doing, considering how easy it is to spoof MAC
>> addresses?

>
> Well, the people who have physical access to the modem aren't that IT
> savy ...


Given that wireless is involved, you have no idea who has "physical access".
 
Reply With Quote
 
Richard
Guest
Posts: n/a
 
      10-25-2008
Chris Lim wrote:

> I have a situation where someone doesn't want to contribute to the
> internet bill in a shared house when they are the heaviest user, so if
> it gets to the point where they refuse to pay then I want to make sure
> they don't get internet access through their computer.


If they are not contributing to the internet access then why are they
connected to the router?

Surely the simpllst thing to do is to unplug them and if they plug it
back in then kick them out?
 
Reply With Quote
 
Lawrence D'Oliveiro
Guest
Posts: n/a
 
      10-25-2008
In message <49025162$>, Collector€NZ wrote:

> The trick is deny all but allow specific stated mac addresees


Never heard of MAC address spoofing?
 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
(router + adsl modem) versus (router with built in adsl modem) LincolnShep Wireless Networking 3 11-08-2006 03:17 PM
Cisco 3640 NM-4E Westell ADSL Modem & Ambit Cable Modem/Router Half 1/2 Speed Chris Cisco 0 06-04-2006 07:38 PM
home network but restricting childrens access to the web =?Utf-8?B?YW5keSBi?= Wireless Networking 4 07-26-2005 12:31 PM
adsl pci modem, and adsl ethernet modem jameshanley39@yahoo.co.uk Computer Information 8 01-18-2005 03:36 PM
Restricting User access to Router with TACACS Freeware Frank Beider Cisco 3 10-20-2003 04:39 AM



Advertisments
 



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57