+ Post New Thread
Results 1 to 13 of 13
Internet Related/Filtering/Firewall Thread, Student Laptop Stop LAN Use in Technical; Hi, Current status: Server 2003 No ISA DHCP Since changing ISP we don't require a proxy server to access the ...
  1. #1

    Join Date
    Apr 2007
    Location
    York
    Posts
    551
    Thank Post
    9
    Thanked 4 Times in 4 Posts
    Rep Power
    19

    Student Laptop Stop LAN Use

    Hi,
    Current status:
    Server 2003
    No ISA
    DHCP

    Since changing ISP we don't require a proxy server to access the internet and the filtering is "on the line".
    This obivously means that students can unplug network cables from the machines and use there laptops instead. The internet is filtered but I was wondering if there is an easy way to stop them doing it. I have there mac addresses.
    Thanks

  2. #2

    Join Date
    Apr 2007
    Location
    York
    Posts
    551
    Thank Post
    9
    Thanked 4 Times in 4 Posts
    Rep Power
    19
    Just had a thought. I could probably give them static IP addresses then Ban access to the internet for those IP addresses in the router.

  3. #3
    Cue
    Cue is offline
    Cue's Avatar
    Join Date
    Mar 2009
    Location
    Hampshire
    Posts
    118
    Thank Post
    5
    Thanked 13 Times in 12 Posts
    Rep Power
    13
    Quote Originally Posted by karldenton View Post
    Just had a thought. I could probably give them static IP addresses then Ban access to the internet for those IP addresses in the router.
    Mac Spoofing is easy as 1, 2, 3 these days, this wouldn't solve much.

  4. #4

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    2,697
    Thank Post
    143
    Thanked 542 Times in 486 Posts
    Rep Power
    148
    An AUP prohibiting this is the first step, along with classroom control. Are teachers allowing it in their lessons?

  5. #5
    Norphy's Avatar
    Join Date
    Jan 2006
    Location
    Harpenden
    Posts
    2,227
    Thank Post
    50
    Thanked 271 Times in 209 Posts
    Blog Entries
    6
    Rep Power
    108
    The most obvious way I can see is to implement 802.1x authenication on your switches assuming that they support it.

  6. #6

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,272
    Thank Post
    613
    Thanked 1,567 Times in 1,407 Posts
    Rep Power
    412
    Install the mac callout filter on your dhcp server then you can deny their mac addresses getting an ip, yes they could spoof the mac address of the machine they just unplugged but it's unlikely tbh.

    Ben

  7. #7

    Join Date
    Apr 2007
    Location
    York
    Posts
    551
    Thank Post
    9
    Thanked 4 Times in 4 Posts
    Rep Power
    19
    No these are not in lessons, its a residential school so they are doing it on a night.
    Our kids are not clever enough to do mac spoofing for sure.

  8. #8

    Join Date
    Apr 2007
    Location
    York
    Posts
    551
    Thank Post
    9
    Thanked 4 Times in 4 Posts
    Rep Power
    19
    Quote Originally Posted by plexer View Post
    Install the mac callout filter on your dhcp server then you can deny their mac addresses getting an ip, yes they could spoof the mac address of the machine they just unplugged but it's unlikely tbh.

    Ben
    Have you got any more help with this please. Do you set it up in DHCP on the server ?

  9. #9

    Join Date
    Oct 2005
    Location
    hey hey hey, stay outta my shed. STAY OUT OF MY SHED.
    Posts
    1,004
    Thank Post
    237
    Thanked 190 Times in 146 Posts
    Rep Power
    106
    Of course, just because your current connection doesn't require a proxy server currently, that doesn't stop you adding one of your own and requiring it's use.

  10. #10
    p858snake's Avatar
    Join Date
    Dec 2008
    Location
    Queensland
    Posts
    1,490
    Thank Post
    37
    Thanked 175 Times in 151 Posts
    Blog Entries
    2
    Rep Power
    51
    I would setup a "public" wifi for them to use and just filter it with your own proxy.

    Just because you don't need a proxy inbetween your connection anymore doesn't you can't have it and use that for authentication.

  11. #11
    bio
    bio is offline
    bio's Avatar
    Join Date
    Apr 2008
    Location
    netherlands
    Posts
    520
    Thank Post
    16
    Thanked 130 Times in 102 Posts
    Rep Power
    37
    for windows 2003 you can use :

    How to Filter MAC Address with Windows Server 2003/2008 DHCP Server Callout DLL

    for windows 2008 (R2) its buildin

    bio..

  12. #12

    Join Date
    Apr 2007
    Location
    York
    Posts
    551
    Thank Post
    9
    Thanked 4 Times in 4 Posts
    Rep Power
    19
    Ok,

    Thanks for your replies.

    Just tried the .dll

    I've got the mac address of one student's laptop, put it in the text file etc.

    Tried the internet on their machine and it works ?? IPconfig shows they have been given an address ending in .71 but when I go into DHCP there isn't an assignment to .71

    The dll log shows:
    Mon Nov 29 14:59:48 2010 022****67922 Deny
    Mon Nov 29 14:59:48 2010 000****49553 Allow
    Mon Nov 29 14:59:51 2010 022****67922 Deny
    Mon Nov 29 15:00:44 2010 0019****951b Allow

    so its denied the address but still works

  13. #13
    waldronm2000's Avatar
    Join Date
    Dec 2009
    Location
    Southend
    Posts
    129
    Thank Post
    49
    Thanked 12 Times in 11 Posts
    Rep Power
    12
    What access layer switches are you using, and do they support MAC-based port security?

    Also, if you wanted to use DHCP to solve the problem, create specific reservations for the MAC addresses in question, then override the DHCP Options for these reservations and give them the wrong default gateway and/or DNS. Alternatively, filter the reserved IP addresses at the router.

SHARE:
+ Post New Thread

Similar Threads

  1. If every student had a laptop......
    By broc in forum Hardware
    Replies: 27
    Last Post: 24th July 2012, 12:36 PM
  2. Stop printing from MAC Laptop
    By apur32 in forum Windows
    Replies: 8
    Last Post: 22nd July 2010, 10:36 AM
  3. Replies: 0
    Last Post: 20th May 2010, 08:30 AM
  4. Stop laptop monitor switching off
    By Little-Miss in forum Hardware
    Replies: 17
    Last Post: 17th November 2009, 01:51 PM
  5. Replies: 6
    Last Post: 9th May 2007, 09:22 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •