I’m not extremely experienced in network engineering, but I have a security question that relates to it. Is it possible to prevent a PC from going to one LAN and force it to go to another LAN based on a MAC address?
I want to set up a quarantine area where PCs and laptops should attach to in order to be scanned and receive patches prior to tying to the real network. I want to be able to do this before any activity on the real LAN takes place. The only way I can see this is if a system looks at a MAC address access list. If the computer is not on the list, it is sent to the “disinfect” LAN, where scanning and other activities are performed. Once that is done, the PC must reboot. During the reboot process, the access control list is updated to include the PC’s MAC address and it is now allowed on the network.
My question is, is there a piece of hardware or software out there that can perform that kind of functionality. Kind of like a firewall and router rolled up into one.
Thanks