Block MAC Address

[Wellington_Rodrigues]

NethServer Version: 7.9.2009
Module: DHCP

Hello everyone, is it possible to block a MAC Address in the DHCP of Nethserver so that the device cannot connect to the network?

[pike (Michael Kicks)]

… this kind of setting should be done on switches… not on servers.

[LayLow]

@Wellington_Rodrigues

Nethserver

Maybe Fail2ban can help…

[pike (Michael Kicks)]

Fail2Ban chews ip addresses, not Macaddresses.

[LayLow]

@pike

chews ip addresses

Ah yes indeed. First Mac then DHCP then IP then Fail2ban

[Wellington_Rodrigues]

Thanks for the answer, pike. I will check on the switch.

[mrmarkuz (Markus Neuberger)]

It’s possible to just allow the specified MAC addresses in DHCP. It can be done in the firewall app settings in server manager, see also Firewall — NethServer 7 Final

[pike (Michael Kicks)]

@mrmarkuz

It’s possible to just allow the specified MAC addresses in DHCP.

IMVHO that doesn’t fit with this requirement.

@Wellington_Rodrigues

so that the device cannot connect to the network?

If the device will be configured manually with a “matching” IP address, will be still able to browse the whole subnet. It will be not able to route outside, but still knock on every device.