[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Web openvpn.net

[Openvpn-users] Re: Filtering Mac Adress?

  • Subject: [Openvpn-users] Re: Filtering Mac Adress?
  • From: Charles Duffy <cduffy@xxxxxxxxxxx>
  • Date: Fri, 04 Mar 2005 14:25:04 -0600

On Thu, 03 Mar 2005 17:18:43 +0100, florian lamberty wrote:

> Is it possible to assign a ip adress to a client, based on the mac adress?
> Or if the mac adress isnÂt registered - the client wonÂt get a ip?

MAC addresses are easily spoofable, so even were this possible, it'd be
quite questionable as a security measure. Much better is to hand out
certificates with unique CNs -- OpenVPN already has the functionality to
hand out IP addresses based on CN, and they can't be faked. (Stolen, yes;
faked, no).

Openvpn-users mailing list