>>>> "JS" == Jeff Spaleta
<jspaleta(a)gmail.com> writes:
JS> the point... network hygiene and accountability.. to make it
JS> harder for an unknown malicious person to connect an unknown
JS> computer into a live network wall jack somewhere in your building
JS> and become a member of that network segment with equal access to
JS> network data that registered computers have.
On that note, many switches can be configured to keep the port closed
for non-DHCP traffic until a DHCP lease is acquired. That solves the
"just assign a static IP"-attack. For the "just steal someone's
MAC-address"-attack, you need 802.1x. Does NetworkManager handle
802.1x on wired interfaces?
/Benny