Prevent someone from internal network access?

[irish411]

Is there any simple way of preventing someone from coming in plugging into our network jack and using the internet or connecting to our network? Basically cut off access to that network jack unless authorized.

I ask because I worry if someone comes in our company with a laptop that has a virus can we prevent them from spreading that virus.

We are using AD on Windows 2003 Server.

Thanks for any advice.

Chad

 

[xmsre]

Cisco port security will lock down the jack by MAC address.

 

[Lou0686]

Hi,

The simplest way would be to physically disconnect the cable between the jack and the hub/switch. It can easily be reconnected when needed.

Lou

 

[irish411]

The removing of the network cable is indeed the easiest but I think that mac filtering the best choice. I was thinking about Mac filtering and I will have to check into if our 3com 3C39036 will do that.

Thanks for your replies so far.

Chad

 

[Zilantyas]

I agree with the MAC Address filtering. But in case that isn't a go then possibly a good proxy server may do the trick. Set the proxy to authenicate the machine when trying to access the internet/network.

Good luck!

Zilantyas
Professional Information Technology Solutions

http://www.zilantyas.com