General Questions

hello, I don´t speak english, only spanish I want that when assigns an IP it fixes and its MAC address, the client when changing its IP does not have access to my LAN or to Internet, since single the IP can be only used that I have related in the IP fields static to its respective MAC address. 

I think you want this:

http://doc.m0n0.ch/handbook/faq-macfilt.html

Hopefully clarknova is right. I have no idea exactly what you want, it would be helpful if someone fluent in English and Spanish could translate what you mean, then some of us could better assist.

Yea I think he's referring to MAC filtering. I do this, and found it's easiest to goto Services > DHCP Server, and then specify the MAC addresses at the bottom that are allowed access. Then the key to blocking un-authorized users would be to check the box that says "Deny unknown clients". Best of luck 

it would be helpful if someone fluent in English and Spanish could translate what you mean

Or someone fluent in English/French if jhon2288 reads/writes French, for example. There are lots of bilinguals in this forum.

jhon2288, are you literate in any other languages?

db

I think you want this:

http://doc.m0n0.ch/handbook/faq-macfilt.html

yes, I want to do that

Using Static ARP
You can ensure certain MAC addresses can only use a certain IP by using static ARP.

To add a static ARP entry, use /exec.php to run the arp command.

arp -s 192.168.1.11 ab:cd:ef:12:34:56
To verify this addition, run 'arp -a' in exec.php and you'll see the following in the list.

? (192.168.1.11) at ab:cd:ef:12:34:56 on sis2 [ethernet]
This change will not survive a reboot. You need to put the arp -s command in your config.xml in <shellcmd>. See this FAQ entry for more information on hidden config.xml options

but, not understand how to do

Go to https://[yourmono]/exec.php ([yourmono] is the address of your m0n0wall GUI).

In the Command: box, type "arp -s 192.168.1.11 ab:cd:ef:12:34:56" where 192.168.1.11 is the static IP address that you want to assign, and ab:cd:ef:12:34:56 is the MAC address that you want to assign it to.

Now you need to go to https://[yourmono]/diag_backup.php and download your config.xml file using the "Download configuration" button.

Open your config.xml file in a text editor.

Find the section that begins with <system> and ends with </system>.

Add the line from above into the <system> section in the following format:
             <shellcmd>arp -s 192.168.1.11 ab:cd:ef:12:34:56</shellcmd>

Do this for every IP and MAC address that you want to assign.

Save your modified config.xml file.

Upload your modified config.xml file using the "Restore configuration" button in the page https://[yourmono]/diag_backup.php. This will reboot the m0n0wall.

Your new config.xml file ensures that the static IP assignments are made each time the system starts up.

Go to https://[yourmono]/exec.php ([yourmono] is the address of your m0n0wall GUI).

In the Command: box, type "arp -s 192.168.1.11 ab:cd:ef:12:34:56" where 192.168.1.11 is the static IP address that you want to assign, and ab:cd:ef:12:34:56 is the MAC address that you want to assign it to.

Now you need to go to https://[yourmono]/diag_backup.php and download your config.xml file using the "Download configuration" button.

Open your config.xml file in a text editor.

Find the section that begins with <system> and ends with </system>.

Add the line from above into the <system> section in the following format:
             <shellcmd>arp -s 192.168.1.11 ab:cd:ef:12:34:56</shellcmd>

Do this for every IP and MAC address that you want to assign.

Save your modified config.xml file.

Upload your modified config.xml file using the "Restore configuration" button in the page https://[yourmono]/diag_backup.php. This will reboot the m0n0wall.

Your new config.xml file ensures that the static IP assignments are made each time the system starts up.

ok, thanks you, one question? I can add more ip's with more MAC address.

Yes.

db

jhon,
there is a simple way to do this, in case your client supports DHCP.
Go to Diagnostics -> DHCP leases.
Look for the IP Address (MAC Address) you like to assign fixed.
Click to "+" and assign the desired IP address.
Jakob

db

jhon,
there is a simple way to do this, in case your client supports DHCP.
Go to Diagnostics -> DHCP leases.
Look for the IP Address (MAC Address) you like to assign fixed.
Click to "+" and assign the desired IP address.
Jakob

db

Thanks, i am doing that, but whether i change the IP address  the client can connect to my network and Internet ,then I need that whether the client change the IP that I have to him in the monowall with his MAC address he  can not enter to my network, because I administer bandwidth by IP address.