Hello,
Is there a way to avoid a problem of MAC address cloning and deny unauthorised access to the internet trough my access point. I do not use pppoe, encryption, hotspot, I just use ARP reply-only and I have created an access-list with permited MAC addresses, but it seems that people get through with MAC address cloning.
Best regards.
Faton
I doubt that you’ll find a way to prevent users from changing their mac to access your service.
The only thing you can do is to use Encryption on the link and not give our the pre-shared Key(s).
hotspot autentification?
Managed switches with port-security or similar options. It will not allow for “walking MAC’s”.
Gregor
now you know why people use pppoe, encryption and/or hotspot 
pppoe kills local network - that is way some people will not use it at all
Gregor
PPPoE kills local network?
You’ll have to explain that… 
Best regards,
Christian Meis
pppoe kills local network - that is w…
yup… 
and how to make prevent about it, cause my networks running with dynamic, pppoe, hotspot, and radius AAA as centralize in one interface, now is work fine…over wire and unwire system.
that’s like saying ppp kills modems.
I think it is the only solution, so I will implement pppoe.
Thanks guys.
Regards.
Faton.
that has it’s own flaws.
whats a username and password worth if anyone can read it?
pppoe makes it a little harder if you limit yourself to ms-chapv2. but if the culprits have lots of spare time then that too wont suffice byitself.
you need to control both ends of any and all links and add some form that can help you gain the trust of the mechanism that maintains the links integrity.
Heh, misunderstanding. What I meant was:
biggest competitors to us giving ethernet tu customers are DSL providers and cable TV companies. Our biggest advantage is local network - DSL and cable TV cannot provide 100Mbps or even 1Gbps between customers.
When U use PPPoE, you kill this advantage and your offer is almost identical to your competitors. Of course U can use PPPoE to internet and ethernet without any tunneling to your network but that couses some problems with p2p software and so on.
Is it now clear?
Gregor
If you control the CPEs and set them up for PPPoE you own the whole connection and have full control. Its just a matter of having a good concentrator to terminate all the connections..
/Henrik