Comments on: How To Bind MAC with IP in SQUID

By: Kashif

Kashif — Mon, 23 Jan 2012 12:23:15 +0000

Perfect automation Mr. Sohail. Keep up the good work. May Allah Bless You.

By: Muhammad Amir

Muhammad Amir — Sat, 14 Jan 2012 11:30:48 +0000

Yes you are right , we have two subnets they are connected through L3 switch. 22 and 21 subntes we are using means /22 is server subnet and /21 is our clients subnet. is there is any possibility that we can achive the results without touching L3 router.

As L3 have only echo ping is allowed….

regard
MAJ

By: Sohail Riaz

Sohail Riaz — Sat, 14 Jan 2012 11:18:58 +0000

@Amir: Now there is a question regarding 2 subnet. If your both subnets are differentiated using router means there is a router between your both routers then MAC address will change when it going from one subnet to another as MAC address always comes in play when host to host connection is seeing.
or if your subnets are not differentiated using router then you need to provide more details regarding your network.

——-
Regards,

By: Muhammad Amir

Muhammad Amir — Sat, 14 Jan 2012 11:03:32 +0000

Sorry riaz

Its working fine actually my network have 2 subnet one for servers and othe for clients and my poxy is on servers subnet , now i am able to filter mac address on server subnet but not on clients subnet machines.

Is there is any solutions regarding different subnet mac address filtering. Plz let me know

Many thnx for replying.

JazakALLAH

By: Sohail Riaz

Sohail Riaz — Sat, 14 Jan 2012 09:44:05 +0000

@Amir: Not working is very small two words. Give us more detail on it.
1) Whats not working a) all PC’s are getting access b) all PC’s are getting denied?
2) Whats your access.log file says when you access any website using the allow PC etc.
3) It might not make any sense but can you change your MAC address from small alpha to capital alpha like this.
acl mymac arp 70:71:BC:AD:92:25
and test it again.

————-
Regards,

By: Muhammad Amir

Muhammad Amir — Sat, 14 Jan 2012 09:05:22 +0000

I am binding my mac with IP but its not working bellow are my configuration of squid.conf on RHEL 5

http_port 10.132.0.162:8080

cache_dir ufs /cache 10240 16 256

visible_hostname srv-proxy1

cache_access_log /var/log/access.log

acl all src 0.0.0.0/0.0.0.0

acl mymac arp 70:71:bc:ad:92:25
acl myip src 10.132.0.10

http_access allow mymac myip
http_access deny all
——————-
Squid version
2.6.STABLE21

plz helpme out

By: Alam

Alam — Sun, 20 Nov 2011 07:58:48 +0000

Copy the script into notepad or gedit text editor and then run it on command prompt. it should be all okey

By: red

red — Sun, 20 Nov 2011 05:10:03 +0000

Hy and thanks for helping people

I’m trying to use your script without success. After running the first script line to get the ip-mac.txt, i got the following:

awk: ‘{print
awk: ^ invalid char ‘�’ in expression
PING 192.168.0.83 (192.168.0.83) 56(84) bytes of data.

— 192.168.0.83 ping statistics —
1 packets transmitted, 0 received, 100% packet loss, time 0ms

So what could be the error, since i just copied your script line and past it !!

Thanks a lot for helping

red

By: Alam

Alam — Mon, 26 Sep 2011 07:10:19 +0000

a small piece of script is written above, and this is one time effort which you have to do that.

By: phoenix

phoenix — Mon, 26 Sep 2011 07:01:47 +0000

Thanks Sohail Riaz ,I want to know if it’s possible to create an external acl function for acl-final.txt because I’m almost managed 150 clients computer and is too long to copy any address in the squid.conf