So I bet you're hoping to learn how to prevent Mack flying attacks and you've come to the right place
to prevent the Mack flooding attacks, network operators usually rely on the presence of one or more
features in their network equipment.
With a feature often called Port Security by vendors, many advanced switches can be configured to limit
the number of Mac addresses that can be learned on ports connected to end stations.
Many vendors allow discovered Mac addresses to be authenticated against an authentication authorization
and accounting or AAA server and subsequently filtered.
Implementations of I Tripoli eight to one 1x suites often allow packet filtering rules to be installed
explicitly by a Tripoli server based on dynamically learned information about clients, including the
Mac address.
Security features to prevent art spoofing or IP address spoofing in some cases may also perform additional
MAC address filtering on unicast packets.
However, this is an implementation dependent side effect.