Rogue machine using gateway ip as the static ip
-
Hello,
If a machine sets up ip a static ip to be the same as gateway/dhcp ip of the pfsense, the network falls apart. Pfsense reports
arp: xx:xx:xx:xx:xx:7a is using my IP address 192.168.9.1 on lagg0.400!Is there a way to block any machine which sets up such a static ip?
I tried to enable "Enable Static ARP entries" in DHCP server setting, but that did not make a difference.
-
@trumee
You have 3 options as i see it.1: Block the mac address in your "configurable switch" , where the rouge pc is connected.
2: Identify the switch port where the pc is connected , and shut it down.
3: Identify the rouge pc , call the person , and reconfigure the ip address./Bingo
-
@trumee said in Rogue machine using gateway ip as the static ip:
Hello,
Is there a way to block any machine which sets up such a static ip?One thing folks new to networking often fail to remember is that the firewall has zero control over local network traffic in a segment. So on your LAN, for example, if device A wants to talk with device B on the same subnet, the firewall is completely out of the picture and powerless to control the behavior of either device A or device B. Same thing applies in your case with a device "stealing" the IP of the firewall. Nothing the firewall can do but complain in its logs (which it did). It is then up to the human to find the offender and cut him off (using the suggestions from @bingo600).
