Problem with Mac address

[engineerzg]

I used Wingate 6.1.1.Tonight, my client complain that someone use his IP so he can't use internet, but when I check that Ip Mac to block that Mac access to Wingate, I don't see anything, just 00-00-00-00-00. I think that computer use some software to hide Mac, like HideIp or something, someone help me, I need to block that computer, I need to know that computer's Mac

[adrien]

Hi

Because of where WinGate itself sits in the network stack it doesn't get access natively to MAC addresses, just IP addresses.

You can use arp.exe from the command line to find a computer's MAC address. First ping the IP, then type "arp -a" from the command line, it will show you the MAC address your computer is using for that IP.

Adrien

[engineerzg]

If someone use some software to change Mac, how can I know that Mac is fake ?

[adrien]

Hi

Sorry, I don't quite understand what you mean by fake? How are you using MAC address? e.g.

* for access control
* for DHCP
* something else
* some combination of the above

Adrien

[engineerzg]

I use Ip policy to control people who can access to my wingate, but sometime someone know that Ip and steal that, so my client can't use internet. In that case, I use filter Mac to block that Ip, but I afraid of someone can use some software to fake his Mac, so each time he use that Ip, he has different Mac

[adrien]

Hi

If you're really worried about people faking MACs to get IPs, then the problem is that policy is using IP address.

I'd recommend using authentication in that case. Integrated NTLM will mean your users don't need to actually type in username/password, but you then are not relying on IP/MAC.

Adrien

[engineerzg]

hi
I have new problem, I used Bandwidthcontroller software to control my client's speed, but I only can control if this computer use a static IP, so If I use NTLM, can I use IP policy at the same time for same client ?

[adrien]

Hi

You can use auth and IP policy to ensure that only people with passwords can use the system, and that users can only use a certain IP... but it gets a bit tricky if you have lots of users.

You can set the location tab in your user policies to do this.

Regards

Adrien