MAC Address Filtering

[Ashwin Gupta]

Is there any way with which I can filter the internet users through their MAC addresses instead of IP address. I do assign the addresses through DHCP but there is way to override it by manually assigning the IP. If there was a way to assign users by their MAC address?

[Jinhee]

Not possible. We can't get MAC address on our side. In the first place why do you allow users to chage their IP addresses? Just don't give them admin permission. Or use another method of authentication. password or AD integration or install NxUpdate, NxClient. There are many ways.

[Ashwin Gupta]

Can you suggest how can we use this in our setup where many of our people bring their own laptops to use at the workplace! We are using AD integration but many of our users who come on a visiting basis do not use our domain to connect!

[Ashwin Gupta]

Also, I had visited other industry where they were using the MAC addresses to filter internet.
I am not sure of their software but as far as I know, they were using IpCop.
If you could add, it would be a useful functionality.

[Jinhee]

Did you not let them go throug login-page? If they don't have AD account then they need to go through login-page. You don't get the login-page?

NxFilter is working on application level and it accesses UDP packet on DNS level and TCP packet on HTTP level. We do authentication on that
level. We can't go down deeper. If we integrate a firewall? Maybe a lot of things possible. But just for having MAC address filtering that's too far
overkill.