Ethernet not Secured

[xmario2013]

Please find the explaination in:

http://www.grc.com/nat/arp.htm

will VLAN solve this problem ?

MAR

http://www.grc.com/securitynow.htm

is a good series of podcast (texted version also available)

 

[Grenage]

Urgh, GRC - scaremongering capital of the internet.

MAC-based port locking is the easiest solution. It's not as big a problem as has been made out in that article. Nowhere near as big.

Carlsberg don't run I.T departments, but if they did they'd probably be more fun.

 

[vacunita]

And who lets juts anybody physically plug into their wired LAN. The security might not be in the LAN itself, but in the environment. Since you need to be physically connected to it, its kind of hard to just walk into an office and plug in.

And any self respecting LAN Manager. Knows exactly where the jacks for their LAN are located and who is using them.

You don't just have rj45 jacks lying around connected to your switch/hub/router for any one to use.





----------------------------------
Ignorance is not necessarily Bliss, case in point:
Unknown has caused an Unknown Error on Unknown and must be shutdown to prevent damage to Unknown.

 

[LawnBoy]

... but it's easy enough to unplug an existing machine and plug yourself into that jack.

Don't EAP Smart Cards solve this problem? I was under the impression that they auth'ed to the switch.

 

[vacunita]

Again, You can't just waltz into an office and unplug any computer and then plug yourself without anybody saying anything to you. What kind of an office would that be?

And if you work in the office I'm sure there are policies against plugging in your "laptop" into the corporate network. I know in mine we have to scan the machines for Virii or other nasty software, before allowing them to be connected.

So it really comes down, to how well protected your rj45 jacks are.







----------------------------------
Ignorance is not necessarily Bliss, case in point:
Unknown has caused an Unknown Error on Unknown and must be shutdown to prevent damage to Unknown.

 

[LawnBoy]

What kind of an office would that be?

One that's ordinarily closed on the weekend (or after hours) but an employee has come in to "catch up".

Sure, we have policies against unauthorized machines on the network, but someone who is out to steal info or exact revenge is going to ignore them.

I can get my MAC addy with ipconfig and then set my laptop to the same...

The fact is that ethernet is an unsecure medium, to those who know enough to exploit it. Thankfully it's complicated enough to do that there are few who can.

 

[Crowtalks]

I, a couple of years ago, plugged a BCM50 into a Corp LAN port by mistake and caused all kinds of havoc, because the BCM (VoIP phone system) was set for DHCP (my bad) and the ISP guys out of Rochester, NY came to TN to troubleshoot the trouble only to find my lowly VoIP system was fighting for DHCP dominance with the Corp domain. They weren't amused...