How to prevent Mac spoofing and Netcut / Selfishnet on wifi / Lan network
-
Hi , I'm new on this forum and a real newbie starter .
I started using pfsense a week ago and my question is
how to prevent ,using pfsense , LAN and WiFi users from cutting / redirecting communications from each other
where they use softwares like netcut and selfishnet to either fully block communication or limit someone's bandwith .
Please take a moment and explain like i'm five . -
@aygtx Hi! I guess you need to approach at 802.1X authentication method with Free RADIUS server for ultra-securing your lan/wlan and keeping out some kind of "lamers" :D
You can read about and search topic like this: https://forum.netgate.com/topic/46059/securing-802-1x
-
@aygtx said in How to prevent Mac spoofing and Netcut / Selfishnet on wifi / Lan network:
how to prevent ,using pfsense , LAN and WiFi users from cutting / redirecting communications from each other
You don't do that at your router, you do that at your layer 2.. So say private vlan on your switches or DAI... Look to your AP feature set to prevent this in your wireless network.
The best you can do at pfsense would be static arp.
But that doesn't stop a client A from arp poisoning pfsense mac.. etc..