networking

2824 readers

2 users here now

Community for discussing enterprise networks and the ensuing chaos that comes after inheriting or building one.

founded 1 year ago

MODERATORS

manifex

[email protected]

[Question] Protecting outdoor LAN port from infiltration? (lemmy.ml)

submitted 4 months ago* (last edited 4 months ago) by [email protected] to c/networking

12 comments fedilink hide all child comments

If you have an outdoor Ethernet port—in my case with a WiFi AP connected—how can you go about protecting your network from somebody jacking in?

Is there a way to bind that port to only an approved device? I figured a firewall rule to only allow traffic to and from the WiFi AP IP address, but would that also prevent traffic from reaching any wireless clients connected to the AP?

Edit: For more context, my router is a Ubiquiti UDM and the AP is also Unifi AP

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 12 points 4 months ago (1 children)

MAC filtering, but if the MAC address is visible from the outside AP it's pretty much useless. Radius would help.

[–] [email protected] 5 points 4 months ago

Yeah since the unit is easily accessible I imagine they could just read the MAC address off the sticker and spoof it.