How to Implement MAC Address Binding for Static IP Addresses in a DMZ?

Installing and Using OpenWrt
1

Hello, I would like to add a layer of security to my DMZ. I have disabled DHCP, but if I set a manual IP address, any device can obtain internet.

Where can I input an IP entry associated with a MAC address so that the address is tied only to a MAC address and not just anyone can connect?

2

You cannot prevent devices from configuring an IP address, and you cannot prevent devices from spoofing a MAC address; device-based security does not work. You need to implement "authenticated ethernet" (IEEE 802.1X).

2 Likes