All of lore.kernel.org
 help / color / mirror / Atom feed
* force a MAC to have one IP
@ 2009-11-05  4:06 Rakotomandimby Mihamina
  2009-11-05  8:27 ` Karel Rericha
  0 siblings, 1 reply; 2+ messages in thread
From: Rakotomandimby Mihamina @ 2009-11-05  4:06 UTC (permalink / raw)
  To: netfilter

Hi all

On our LAN, we have a DHCP server that offers fixed IPs to some MACs.
(We dont use such solutions as NuFW yet)

We would like to ensure one IP adress is used by the assigned MAC.
(QoS matter)

Is this a good enough solution:
-A INPUT   -m mac --mac-source 00:15:C5:F4:29:7C -s ! 192.168.1.13 -j REJECT
-A FORWARD -m mac --mac-source 00:15:C5:F4:29:7C -s ! 192.168.1.13 -j REJECT

Is there any better one?

-- 
        Architecte Informatique chez Blueline/Gulfsat:
    Administration Systeme, Recherche & Developpement
                                    +261 33 11 207 36

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: force a MAC to have one IP
  2009-11-05  4:06 force a MAC to have one IP Rakotomandimby Mihamina
@ 2009-11-05  8:27 ` Karel Rericha
  0 siblings, 0 replies; 2+ messages in thread
From: Karel Rericha @ 2009-11-05  8:27 UTC (permalink / raw)
  To: Rakotomandimby Mihamina, netfilter

2009/11/5 Rakotomandimby Mihamina <mihamina@gulfsat.mg>:
> We would like to ensure one IP adress is used by the assigned MAC.
> (QoS matter)
>
> Is this a good enough solution:
> -A INPUT   -m mac --mac-source 00:15:C5:F4:29:7C -s ! 192.168.1.13 -j REJECT
> -A FORWARD -m mac --mac-source 00:15:C5:F4:29:7C -s ! 192.168.1.13 -j REJECT
>
> Is there any better one?

Use ipsets, probably macipmap.

Karel

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2009-11-05  8:27 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2009-11-05  4:06 force a MAC to have one IP Rakotomandimby Mihamina
2009-11-05  8:27 ` Karel Rericha

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.