[NTLUG:Discuss] How do you secure a LAN?

[Richard Geoffrion]

Bug Hunter <bughuntr at one.ctelcom.net> wrote:
>   The best way to do this is to run DHCP, with assignment of IP
> address tied to a MAC address on a network card.
>
>   That prevents a machine from getting an address from your dhcp
> server before you have vetted the machine.
>

Main Entry: vet
Function: transitive verb
<snip>
2 : to subject to expert appraisal or correction : EVALUATE


Wow! Such a big word!  I think I'll make that my "Word of the Day"

Sometimes not every machine is available for vetting!  I can see this issue
arising with wireless networks.   I was thinking about solving the issue
where a properly passworded web page form could be filled that would allow
updating of the dhcpd.conf file to include that workstation by adding in the
MAC address..blah blah.

I might be able to write something like that, but it would take me far
longer than necessary as my skills with PERL are barely adequate. :)  Does
anyone else have this functionality setup??

How urgent is your need, Bob?

-Richard