Ethernet Bridge development
 help / color / mirror / Atom feed
* [Bridge] Port Security
@ 2010-09-10  4:01 Ryan Whelan
  2010-09-10 15:11 ` Stephen Hemminger
  0 siblings, 1 reply; 2+ messages in thread
From: Ryan Whelan @ 2010-09-10  4:01 UTC (permalink / raw)
  To: bridge

[-- Attachment #1: Type: text/plain, Size: 405 bytes --]

I am developing an appliance that will use bridging to create a little
integrated switch.  We need to ensure that only approved devices are allowed
to connect to the switch; are there any mechanisms to enforce security
within the linux bridge? What would be the recommended method if not?
ebtables?

I did a search and found nothing- please point me in the right direction if
I missed something!

Thanks!

[-- Attachment #2: Type: text/html, Size: 428 bytes --]

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: [Bridge] Port Security
  2010-09-10  4:01 [Bridge] Port Security Ryan Whelan
@ 2010-09-10 15:11 ` Stephen Hemminger
  0 siblings, 0 replies; 2+ messages in thread
From: Stephen Hemminger @ 2010-09-10 15:11 UTC (permalink / raw)
  To: Ryan Whelan; +Cc: bridge

On Fri, 10 Sep 2010 00:01:57 -0400
Ryan Whelan <rcwhelan@gmail.com> wrote:

> I am developing an appliance that will use bridging to create a little
> integrated switch.  We need to ensure that only approved devices are allowed
> to connect to the switch; are there any mechanisms to enforce security
> within the linux bridge? What would be the recommended method if not?
> ebtables?

no. it is not designed to do this.

> I did a search and found nothing- please point me in the right direction if
> I missed something!

802.1X?


-- 

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2010-09-10 15:11 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2010-09-10  4:01 [Bridge] Port Security Ryan Whelan
2010-09-10 15:11 ` Stephen Hemminger

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox