4 ms·
Mac addresses should be registered with the network and run an endpoint security agent to continue physical access.
by nerpderp82 5y ago
Mac addresses should be registered with the network and run an endpoint security agent to continue physical access.
- yjftsjthsd-h 5y agoIsn't 802.11x the right solution? MAC addresses can be faked easily; 802.11x forces actual authentication (and encryption, IIRC?).
- randmeerkat 5y ago“802.11x is generic term to refer to the IEEE 802.11 standard for defining communication over a wireless LAN (WLAN).” https://www.techopedia.com/definition/508/ieee-80211x https://www.techopedia.com/definition/508/ieee-80211x I believe you’re looking for 802.1X https://en.wikipedia.org/wiki/IEEE_802.1X https://en.wikipedia.org/wiki/IEEE_802.1X
- yjftsjthsd-h 5y agoOops, I've been misreading that for ages; thanks for the correction.
- rnhmjoj 5y agoThe protocol (802.1x) is a mean of granting/denying access to a network based on a set of rules. It does authentication, which is itself end-to-end encrypted, but it doesn't provide confidentiality, meaning no encryption. Also, I'm not sure, but I believe it doesn't protect againts active MITM attacks (also meaning injecting packets). There's another set of protocols, 802.1AE or MACSec, which should do what you ask.
- tinus_hn 5y agoMac addresses are useless for security purposes. There really is no right solution using a Pi, everything is on the SD card and there is no encryption possible. It’s a bit too open.