i have the netgear WGR614v6 wireless router.. and things are up and running just fine... i have this sent (underground) to our resort next door and have 5 computers (plus the three at our house) all running off this router...

i have our house using the WIFI, which i have hid the SSID, enabled WEP and also use MAC control.. things work great...

my question is, how can i protect the wired internet?
say, if someone where to go into our kitchen, and unplug the ethernet jack connecting our POS computer? they could easily plug it in their laptop and connect online/veiw network places etc (i do have the network secured pretty well, but still)
is there a way to limit who can use the wire, for the wireless there are 3 levels of security.. dont broadcast SSID number, WEP (or eqv) and MAC address... with wired i see nothing.. am i wrong? please help!

thanks
pj

The security available to a wired network is not present like a wireless network because you need physical access, something that you don't need with wireless.

You might be able to use MAC filtering the same way as you do on the wireless Network. Not all routers allow MAC filtering on the wired connections.

Easier to keep unwanted guests out of your kitchen.

Stuart

Install a server in which all computers and users must authenticate to. If they can't authenticate to the sever they can't get access to network resources.

this is the only way huh? i wish we could control via MAC address with the LAN like you can with WLAN....
but i looked around the prefs.. no go... i can do static routes.. but no where to lock down... (could i turn off DHCP???) and set it to static routes??? would something like this owrk?? no?

thanks for responding!
pj

Hold on. You have a wireless router. I take it that the wired pcs go into it?

If so you can mac filter on them also. My dlinks/netgears have no issue doing mac filtering on the wired lan connections.

I also do dhcp limits. I only supply the exact amount of ips for known connections. This adds a layer of trouble for a hacker trying to do mac spoofing.

Give a person a fish, they eat for a day. Suggest they internet search and they learn a skill for a lifetime.

I don't believe that shutting off DHCP and using static routes will work, because chances are if there already in your kitchen, at your PC all they have to do is look up the IP address on your PC before they unplug it. Then replicate it on theirs when they plug theirs in.

wanderer... how do you do it with LAN? all i can secure via MAC is wireless.. i have the netgear WGR614V6

thanks
pj

http://kbserver.netgear.com/pdf/wgr614v6_ref_man_20Apr05.pdf

section 6-12 ip reservation table

manuals are good things to read :-)

Give a person a fish, they eat for a day. Suggest they internet search and they learn a skill for a lifetime.

wanderer... yes, manuals are great, and i like to read them as well.. i re-read it, and got nothing.. that is how i have mine set up.. i have static routes.. i hit add, it shows what is connected, hit the radio botton by what i want to add, fills in the IP (i can change it if i want) and the mac address... hit APPLY.. great, now i have a static route.. so office will always be xxx.xxx.xxx.4 and kitchen wil be xxx.xxx.xxx.5... but if someone plugs in, the router will give them 6.. i dont want this..

i have been playing around with it.. and see no way of limiting access (for LAN) based on MAC address...

pj

>> but if someone plugs in, the router will give them 6. <<

Why should it. If the router doesn't know the MAC address of the device that is being plugged in it wont allow it to connect.

MAC addresses are unique to every switch, NIC and router ever made.

Stuart

stuartS... i guess i dont get what you mean..
what im saying is.. to give static routes it uses MAC address... i see no where where i limit it to MAC address only (for LAN)
for WLAN, its called access mode.. and you can turn it on and off... for LAN i see no where for this option!!!
this option i mention, i accessible under the WLAN menue... there is nothing similar under the LAN tab...
am i missing something here or what??

thanks again all!
pj

anyone?

anyone anyone? i wish this bumped messages back to the top... no one will seee thisss... help help!!

The MAC filtering should filter devices hard wired into the router as well.

Try removing the MAC address of a laptop on your network from the filter, and hard wiring into the switch. If it still pulls an IP address and can access the internet, then it's obviously not filtering the MAC's of hard wired machines.

In my experience, I can tell you that Linksys devices seem to filter MAC address on hard wired devices...

Good luck!