In your message you wrote:
->
-> A few weeks ago, in the wake of the CERT announcement, someone wrote:
->
-> > One of the simplest solutions for local snooping, though it costs real
-> > dollars, is to replace 10Base5 networks, 10Base2 and 10BaseT hubs with
-> > "smart hubs". These hubs only send traffic destined for preconfigured
-> > specific mac addresses and broadcast packets out each hub port. You can
-> > snoop all you want, but you won't see traffic unless it is destined for
-> > you.
->
-> Can someone give me a product name and point me at a vendor which sells
-> such a hub?
Using the Cabletron hubs with the EMME management modules, you can
lock down the ports so that if someone attempts to connect a device
with a different MAC address onto a port, it won't communicate. You
can also set alarms so you know if someone has disconnected the
device attached to a port. There are lots of ways of watching over
your network with smart hubs. BTW, Cabletron can be reached at
603-332-9400.
-------------------------------------------------------------------------------
David White Grass Valley Group, Inc. VOICE: +1 916.478.3052
P.O. Box 1114 Grass Valley, CA 95945 FAX: +1 916.478.4208
Internet: David .
C .
White @
tek .
com UUCP: uunet!gvgpsa.gvg.tek.com!davew
Follow-Ups:
References:
|
|
