block a user by identifying him by mac address??

[kool_boby]

hi,
i'm using wingate, and i have a problem there are some users in my nework when i block them or disable they change their ip and use the net illegally i want to know that is there any way or option in wingate through which we can specify a mac address of a user and block him from getting net access. and another thing i have noticed that in wingate multiple users can use a same user name to access internet through wingate. is there a way by which i can disable this mutli use of user names.
thanx
bye

[erwin]

Hi there

Depending on which version you are running,
You can have users authenticate through either GateKeeper authentication, or by WinGate Internet Client, or by Java Authentication (through a Java enabled browser).

Authentication can be set on a per service basis (Policies tab of the particular service) or system wide through the system policies tab in the User configuration in GateKeeper.

Here you will also find the "Users can have simltaneous access from multiple computers" System policy, which is what your after for your last problem.

Authentication and System Policy setup are explained further in the WinGate helpfile.

I think once you have the users being authenticated before being able to access WinGate, should fix users on your Network using WinGate when they shouldnt.

Regards
Erwin

[budiono]

i've the same problem also. i've been able to block user using it's mac address but if i add another mac address, all user can't bwrose internet. and i delete the new entry of mac address still not solve the problem.
i think i'll try it again later. or anybody already success using this method of bloking using mac address???
thanks...

[keeper30]

hi budiono,

Email me at keeperz30@yahoo.com.

[mikebos]

Hi,

I experienced the same problem, first user assume, policy criteria match MAC address works nicely, subsequent user, everyone stops but not always, I suspect it might be something to do with client OS or NIC.

Regards
Mike Bos

[Manu]

Hi All,

I have a solution for the said problem. Please try if it helps you.

1. You configure a DHCP server and reserve the IP addresses based on the mac address - for different users.

2. Then you configure the policies based on IP

3. Ofcource, still for an expert he can try the same ip you assigned. But he will be caught when he try with the new ip as the DHCP server will give you the alert when some other PC uses the reserved IP.

This is very helpful in a WAN environment as the MAC settings may not function in WAN

Rgds

Manu.

[mikebos]

Hi,

I tried several DHCP variations on MAC reservations with IP's.

In general I found that you could match IP's to MACs and DHCP would serve accordingly. ie mismatch = no IP served.

I find all other Wingate services don't care how the client gets an IP, OS-DHCP or client assigned they just serve the traffic unless there are matching service or system policies.

Regards
Mike Bos