MAC Address security for login into CRM

Hi,
Can somebody tell me that how can i provide any hardware security to our CRM users. For example - MAC Security.
If a CRM user is having the login ID and password of another user, he can easily access the records of that user. Can we provide any type of hardware security ?
Regards
Khushboo Mittal

I haven't come across any hardware security feature so far. The best you can do is the IP address restrictions.

Similar Messages

Multipe mac addresses entries for the same port (FE)-Switch 3560

Dear All,
I have a problem with a host whitch is connected to 11 port of my cisco 3560. from time to time the, the connection is lost with the host and after some troubleshooting i see two entries of mac-address table for the port 11.
I'm asking if someone has an idee how to explain this issue and how to see if this port is participing to SPT or...
I see also somme error of collision :
===================================
5 minute input rate 1000 bits/sec, 2 packets/sec
5 minute output rate 7000 bits/sec, 1 packets/sec
     64677029 packets input, 17167881111 bytes, 0 no buffer
     Received 39036768 broadcasts (0 multicasts)
     0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 watchdog, 39036088 multicast, 0 pause input
     0 input packets with dribble condition detected
     54722071 packets output, 8588329003 bytes, 0 underruns
     0 output errors, 992 collisions, 1 interface resets
     0 babbles, 2316 late collision, 0 deferred
     0 lost carrier, 0 no carrier, 0 PAUSE output
     0 output buffer failures, 0 output buffers swapped out
======================================
i have two routers in the same switch: my wan router + un other router used to conneced some separated hosts to internet.
If i use statif addressing for the second subnet (2 hosts + internet router), is there any risk for collision or broadcast domains or errors ?
is the second router distrub my LAN or WAN ?
Manay thanks for your help and support.
Best regards,

Hello,
For the first part of the question, I guess somebody might be connecting a hub to that port. If the hub is not negotiating the speed/duplex with the 3560 switch, then that port will go to half-duplex mode and you will see collisions on the port. That might also explain why you are seeing multiple MAC addresses on that port. Please check the port to see if the hub is connected and remove it. You can use features like port-security to ensure only one MAC address is registered on that port and people are not connecting hubs/dumb switches on that port.
For the second issue, you can certainly use static IP addresses as long as they are not overlapping with other subnets in your network. If they are overlapping, you do need to configure NAT on the router so that they are not affecting rest of the network.
Hope this helps.
Regards,
NT

My Mac is asking for "login"keychain what is this

My max is asking for "login" keychain and I can't get it off and it's not letting my access other things without this keychain. I've entered my login password and that doesn't work

Back up all data.
Launch the Keychain Access application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Keychain Access in the icon grid.
Select the login keychain from the list on the left side of the Keychain Access window. If your default keychain has a different name, select that.
If the lock icon in the top left corner of the window shows that the keychain is locked, click to unlock it. You'll be prompted for the keychain password, which is the same as your login password, unless you've changed it.
Right-click or control-click the login entry in the list. From the menu that pops up, select Change Settings for Keychain "login". In the sheet that opens, uncheck both boxes, if not already unchecked.
From the menu bar, select
Keychain Access ▹ Preferences ▹ First Aid
If the box marked Keep login keychain unlocked is not checked, check it.
Select
Keychain Access ▹ Keychain First Aid
from the menu bar and repair the keychain. Quit Keychain Access.

Blocking all MAC addresses except for the ones you allow

I have a Cisco Aironet 1200 Access Point. I want to block all MAC addresses from accessing the access point, except for the ones I've allowed. First I went to the Address Filters page and clicked on Allowed, then listed all the MAC address I want to be able to access the access point. Then I went to the Ethernet Advanced page, and set the Default Multicast Address Filter to Disallowed, and the Default Unicast Address Filter to Disallowed. Then I went to the AP Radio: Internal Advanced page, clicked on the Advanced Primary SSID Setup link, and set the Default Unicast Address Filter to Disallowed. Accept Authentication Type is set to Open with Shared and Network-EAP cleared, and the Require EAP check boxes are all cleared.
When using a computer whose MAC address is not listed on the Address Filters page, I am still able to connect to the network through the access point. I am also able to connect to the access point from any pc on my network by entering its IP address in Internet Explorer.
What do I need to do to block any pc without a listed MAC address from connecting to the access point?
Thanks, Jeff

Here's the instructions and URL on how to create an MAC based filter:
Follow these steps to create a MAC address filter:
Step 1 Follow the link path to the Address Filters page.
Step 2 Type a destination MAC address in the New MAC Address Filter: Dest
MAC Address field. You can type the address with colons separating the character pairs
(00:40:96:12:34:56, for example) or without any intervening characters (004096123456, for example).
Note If you plan to disallow traffic to all MAC addresses except
those you specify as allowed, put your own MAC address in the list of allowed MAC
addresses. If you plan to disallow multicast traffic, add the broadcast MAC address
(ffffffffffff) to the list of allowed addresses.
Step 3 Click Allowed to pass traffic to the MAC address or click Disallowed
to discard traffic to the MAC address.
Step 4 Click Add. The MAC address appears in the Existing MAC Address
Filters list. To remove the MAC address from the list, select it and click Remove.
Step 5 Click OK. You return automatically to the Setup page.
Step 6 Click Advanced in the AP Radio row of the Network Ports section at
the bottom of the Setup page for the radio you want to configure. The AP Radio Advanced page appears.

MAC address display for normal user

Hi ,
Any one can share, which command will display MAC address for normal user. I can't get exact result from arp command.
Regards,
Siva

hmm, arp should work, odd.
Aynway, you can also find it from prtconf, which requires some parsing if you have more than one interfaces;
prtconf -vp|grep -i mac-address
.7/M.

How do I download mac address book for OS X Lion

My address book crashses as soon as it starts. I cannot find the address book to delete and re-install it as there is no folder called Library/Application Support/Address Book.
Can someone either direct me to the right filder to delelete the address book so I can start again or tell me how to download Address book agaian.
I do not have a disk adn I downaloded the update from the web. I am running OSX 10.7.5
Help!

Address book is part of OS X and cannot be downloaded. I suspect you have a preference issue with it. OS X stores these in these two files:
com.apple.AddressBook.abd.plist
com.apple.AddressBook.plist
You need to locate both and drag each to the desktop. Once you have done so for both, restart Address Book and retest. To locate these files simply:
1. Finder - Go Menu - Go to....
2. Type ~/Library/Preferces/com.apple.AddressBook.abd.plist and hit the enter key. OS X will then disply the file.
3. Repeat step 2 only this time use ~/Library/Preferces/com.apple.AddressBook.plist

WRT160N PS3 MAC Address Filtering

Does anybody know how to set up the MAC address filtering for a PS3, or if the PS3 even recognizes it? I find the MAC address for the PS3, enter it into the MAC address allow column and try to connect. Doesn't work. Take the MAC Address filter off and bingo back to working. I am using WPA at the moment, and that is it. Any suggestions or advice would be much appreciated! Thanks.
Solved!
Go to Solution.

Once you remove the Mac address...it is working fine...that means the Mac address you are using is probably not correct Mac address.Each and every device has its own Mac address...
Follow the steps to get the wireless card Mac address for your PS3
. Power up the PlayStation 3 without any disc in the drive.
2. Once the PlayStation 3 operating system has loaded, select "Settings."
3. Once you are in "Settings" select "Network Settings."
4. When the "Network Settings" list appears, select the first option which is titled "Settings and Connection Status List."
5. The physical address of the wireless card will be listed under "MAC Address." Write this number down...(this is Mac address).
Now login into the setup page of your router and try this Mac address.

Change Bluetooth MAC Address on MacBook... for Pioneer radio sync

Okay before people get into an uproar...
Pioneer has a Bluetooth add-on for their touch screen nav radios. It allows a bluetooth enabled phone to send and receive calls, as well as sync their phone books.
Problem is that the iPhone does not allow a user to send their phone book over bluetooth. Currently I am syncing my iPhones phone book to my MacBook. I found out that the Pioneer unit ID's its phone book by the Bluetooth MAC address that uploaded it- ie you could have 4 phones hooked to the unit, and each one can have their own separate phone book, and the unit knows which phone book goes to which phone by Bluetooth MAC address.
What I would like to do is change the Bluetooth MAC address on my MacBook to match that of my iPhone. This way I can send my phone book over to the Pioneer unit, and then hook up my iPhone to the unit and be able to use the contact dial build into the Pioneer.
Hope that all makes sense. Is this possible? Is this possible and no one wants to talk about it? Its just too bad that Apple gave the iPhone such a stripped down Bluetooth option list.

I don't think that's going to be possible. The MAC address is hard wired into each device. Everyone is different. There is no way(at least that I'm aware of) to change it.
There are instances when you can "spoof" a MAC address, but the only place I've seen this was in routers... This allows the router to pretend to be, or spoof, a different MAC address... it doesn't really change it. And note that in this case that router is between the spoofer and the spoofey, so to speak.
I just don't think you'll be able to do what you want the way you want.

What is the MAC address for VMware Workstation

Hi,
Is MAC address same for both our Normal PC and the VMware workstation?

Like the IP addresses, MAC addresses have to be unique for each network adapter, no matter whether it's a physical or virtual adapter.
André

Reports for Apple devices with SCCM client - Mac Addresses and IP information.

Greetings.
I've been having an interesting problem.
I am currently running SCCM 2012R2 with PKI and have clients installed on windows, linux (ubuntu mostly) and apple computers successfully.
I have created custom report proving me with hardware information for windows and linux machines (Serial numbers, manufacturer, Mac Addresses and IP addresses) successfully.
So far I wasn't able to create any report or even find what table information about Apple computers MAC and IP addresses is stored.
If i go to Apple computer in SCCM using resource explorer under hardware I can see network devices, so that information is definitely gathered by SCCM in some way.
Can anyone help me out with this and maybe I am doing this in a wrong way?

Nice. Only trouble there seems to be multiple entry for same mac address there for same resource id.
So when I try to get them as substring i get multiple copies of same mac address.
But looks like this will work as solution to this problem.
So far I was doing it this way (And i am sure there is clearer way to do it.)
SUBSTRING((SELECT ',' + CAST(t2.MACAddress0 AS VARCHAR(40))
            FROM (SELECT DISTINCT ResourceID, MACAddress0 FROM v_GS_NETWORK_ADAPTER) t2
            WHERE t2.ResourceID = ResourceID
            ORDER BY t2.ResourceID, t2.MACAddress0
            FOR XML PATH ('')
        ), 2, 100) [MACAddresses]

E 2500. Mac Address Filter. Improvement. Sugestion

Hi, what brings me here is a suggestion for improvement in the product management software. Where you make any configuration and / or alteration.
My suggestion concerns the application of the 'MAC Number filter'. This application allows you to add devices that may or may not access the Linksys E2500.
It turns out that the current version of this management software, to insert into the list (restrictive or permissive) of ' MAC Number filter'. This insert serves to both wifi networks generated (2.4 GHz and 5 GHz).
In my case the core network for home use is the 5 GHZ. And the 2.4 GHz network was set to 'guests'.
So, when someone comes to my house is either use the 'Network - Guest' can only be used if:
1- If I'm applying MAC address filtering for my household devices - must have to individually enter the MAC address of each guest; or
2- Do not use for my home devices MAC number Filtering
I understand that this security feature (MAC number Filter) is very good and helpful. But the way it is designed is not practical.
My suggestion is to update the management / configuration software to enable:
A) The owner can set Allow List or Prohibition of the home devices in the MAC number filter separately. In the 5 GHz network (main). Leaving free the Guest Network;
B) Provide the update mentioned in item 'A' (above) also in Cisco Connect application.
Thank you for your time and attention.

I think other manufacturers follows the same MAC address filtering protocol but I'm cool with your suggestion and it might be implemented in the future by Linksys. Enabling the Guest Access on the router's setup page (Wireless tab > Guest Access) will ease you out of the hassle of inputting the MAC addresses of your guests' wireless devices. Your visitors will still be able to connect to the guest network even if the MAC address filtering is enabled but those will have limited access to your network.

Is a MAC address filter incompatible on an extended network?

Hello all,
I've bought myself an Airport Express and an Airport Extreme.
The Express serves two roles:
1. Play music
2. Extend my network (a real extension, not just a network join)
On my Extreme, I've setup MAC address filtering with a time-based access (to avoid hacking of my network during the night -- don't worry, I have WPA2 security too...). Here's what I've done:
- All devices: no access from 11 PM to 7 AM
- Airport Express: always access
- Macbook Pro: always access
So far, so good.
Now, the problem I see if the following: IF my Express has access anytime, then an unknown device CAN connect to my network at night (midnight for example) simply because it will connect on my Express instead of my Extreme! It's like an unlocked back door!
So, from what I see, when I extend a network, the MAC filtering is not passed along to the "extending" devices. Also, on an extended network, I CAN'T set a MAC filter... So I'm stuck with an unsecure extending device.
So, my question is the following: is this normal behavior or is this an oversight from Apple? In other words, how can I extend my network and "propagate" my security setting on all my devices?
Thanks!
P.-S. On another topic, but related, any idea how to apply a setting without rebooting the router everytime? This is very annoying.

HI Yes this works fine. I have these  wifi base stations these configurations on the same subnet in my place *using MAC filtering (access control)* in two extended networks.. Here's how I do it.
• AEBS 802.11n@5Ghz 9DHCP and WAN.. and MAC ADDRESSES. TimecapsuleTV = SSID="my5Gwifi" , closed network
• 1 x AEBS 802.11g 2.4Ghz snow coloured dome base station (connected through ethernet to the main 802.11n AEBS) + 2 x 802.11g APx's + 802.11N APX; closed network; name | SSID ="my2.4Gnetwork"; all bridge mode. FOr WDS add all MAC addreses of all devices like iphones, ipods, macs, pea-seas, PS2's etc and the other APX base stations too!.
Here's the deal:
for the 802.11N base stations (AEBS . TC or APX gen 2), the extensible wifi stations are through '+extend this network+" in the + Airport Utility+.. There is no provision for the extension stations to addf any ACCESS control if you use BRIDGE MODE> (as I would you to do advise).
• for the *802.11g or WDS* I have found that you must ADD all the MAC addresses in EACH of the base statsion. This is simple to do my exporting all teh mac address config lists and importing them as you need. THis works fine.
My company registers world wide all laptop wireless nics. We have over 300,000 employees (3 x 10**5) all dynamically VPN'ed adn mac address filtered for windows , linux and unix. it works for them worldwide. Walk into any office and you are connected.
As for me and others WEP, WPA2 and all that is a mess around for hours (with that awful redmond based software) with frustrating and a huge waste of time when some one tries to connect to your system with some of those ghastly microsoft opertating systems. They all have their quirks. Vista - well you mostly know.
In any case the simplest and I beleive effective for most is MAC ADDRESS fitering.
FWIW all ways can be infiltrated.. you just need to monitr your network or add a GBE hub and use cables where the cables are in a locked oom.
hth
w

Mac address of HP LaserJet Pro MFP M126nw

Hi People,
Recently bought HP LaserJet Pro MFP M126nw wireless printer and tried to connect to WIfi. but my Wifi is Mac authenticated and I need to configure the mac address of the printer into the network. But I dont know how to get mac address of the printer.
Need you help pls.......its urgent.
Thanks....
This question was solved.
View Solution.

Hi @Satishkumarsah ,
I would be happy to help you be able to get the Mac Address for the printer.
The configuration page lists current network summary and the Mac Address. To print a configuration page, do the following:
LED control panel:
1. From the product control panel, press and hold the Cancel button for 10 seconds.
2. Release the Cancel button.
LCD control panel:
1. From the product control panel, press the Setup button.
2. Open the Reports menu.
3. Use the arrow keys to select Config Report and then press the OK button to begin printing the report.
Hope this helps.
Have a nice day!
Thank You.
Please click “Accept as Solution ” if you feel my post solved your issue, it will help others find the solution.
Click the “Kudos Thumbs Up" on the right to say “Thanks” for helping!
Gemini02
I work on behalf of HP

WRT54GL MAC ADDRESS FILTER

Hi I have a wireless access point WRT54GL and i configure it with mac address filter but it allow me to put only 40 mac and i need more? Is there any way to add more? Thanx

Install 3rd party firmware like dd-wrt or hyperwrt+thibor. That should give you more. However, remember a bad flash may brick the router and is not covered by warranty.
Also remember, that the wireless mac address filter does not provide you with any reasonable security. MAC addresses are quickly captured and quickly cloned. It only takes a few minutes to gather some mac addresses which are allowed into your wireless network and that's it.
Set up wireless security with WPA2 or WPA and a strong passphrase. That's all you can do to really protect your wireless.
If you want more detailed access control, consider installing a RADIUS server and using user/password authentication based on WPA2 or WPA (using the RADIUS or Enterprise variants).
But the wireless mac address filter is widely overrated as security mean and only requires a lot of work and time to maintain the lists.

Changing MAC address (spoofing)

Hello,
I want to change the MAC address on a Mac Book Pro running OS X Leopard utilizing the command:
+sudo ifconfig en0 lladdra 00:11:22:33:44:55+
Even though the command does not give a warning, nor an error message, the MAC is not changed. In Tiger, it the same command did just fine.
How do I enable MAC address Spoofing on OS X Leo? Is there any parameter to send to the Kernel?
Mh.
For somewhat ever reason, MAC address spoofing for the wireless interface (en1) still seems to work!?
Makes me fell confused:-)
Help strongly appreciated!
Thanks,
Chris

This is how it works on my machine. Note the change of MAC address and because I am using DHCP it changes the IP address also. I have changed the MAC address in this info so as not to use my real one. So I am now running on the new MAC address. It will revert to the original on reboot, you would need a script to change it every time you restart the computer. Not sure why but this does not work on the airport.
This is a nice exercise but why do you would you want to change it?
regards
Last login: Tue Oct 27 13:42:53 on console
Computer-name-iMac:~ username$ ifconfig en0
en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1492
inet 192.168.0.2 netmask 0xffffff00 broadcast 192.168.0.255
ether 00:1e:c2:aa:bb:06
< cut>
Computer-name-iMac:~ username$ sudo ifconfig en0 lladdr 00:1e:c2:aa:bb:07
Computer-name-iMac:~ username$ sudo ifconfig en0 down
Computer-name-iMac:~ username$ sudo ifconfig en0 up
Computer-name-iMac:~ username$ ifconfig en0
en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1492
inet 192.168.0.3 netmask 0xffffff00 broadcast 192.168.0.255
ether 00:1e:c2:aa:bb:07
media: 100baseTX <full-duplex,flow-control> status: active
<cut>
Computer-name-iMac:~ username$

MAC Address security for login into CRM

Similar Messages

Maybe you are looking for