Subject: WaveLAN advice
To: None <netbsd-users@netbsd.org>
From: Chris Jones <cjones@rupert.honors.montana.edu>
List: netbsd-users
Date: 06/08/1999 16:32:24
Has anybody out there in NetBSD-land had any experience with WaveLAN
products? Especially for inter-building networks? The ISP I work for
is considering offering WaveLAN to its customers.
This brings up an interesting line of thought. If WaveLAN is *really*
just a replacement for ethernet, then how do you prevent random people
from grabbing an IP number and using your link? And how do you go
about limiting the bandwidth a user can use?
For the first question, I suppose I can have my gateway machine
maintain a list of static ARP entries, and refuse to talk with
somebody using a mismatched IP/MAC address pair. Then I can put in
bogus entries for any unassigned IP's. I wonder how easy it is to
spoof a MAC address over WaveLAN?
The second question could be more difficult, though. Anybody have any
ideas? How *do* you limit bandwidth usage through a gateway machine?
Ultimately, it would be neat if I could have the gateway allow
unlimited access to our internal network, but bandwidth-limited access
to our outbound connection. Any ideas?
Chris
--
-----------------------------------------------------cjones@math.montana.edu
Chris Jones cjones@honors.montana.edu
Mad scientist at large cjones@nervana.montana.edu
"Is this going to be a stand-up programming session, sir, or another bug hunt?"