[KLUG Members] stop unknown static IPs on lan

[Bruce Smith]

>> Is there a way to foil attempts of employees to bring in a new computers
>> or laptops and plug into our corporate lan. My DHCP server is set to
>> only give out IPs to known ethers, but I've stumbled upon a static IP
>> when I tried to use it and get conflict errors.
>>     
>
> Get a switch that supports EAP/802.1x and devices will have to
> authenticate onto the wire.  Managed switches also usually let you
> provide a list of MACs.
>   

'arpwatch' is also a good package that will report unauthorized IP's.

 - BS