Security Basics mailing list archives
Re: Mobile VLAN
From: Bernardo Wernesback <bernardosw () gmail com>
Date: Wed, 25 Jan 2006 16:40:29 -0200
Hi Gabriel, You can actually do this using extensions based on 802.1X authentication. Enterasys calls this SecureNetworks - you can set the VLAN, QoS, filters, etc. all based on which user is logged on the port! We've actually done a project using this and it really works. Cisco also has something similar - I believe they call it RBAC - but Enterasys is stronger in this arena. If you need more info e-mail me. See ya, Bernardo. On 1/23/06, Gabriel Orozco <gabriel_orozco () mx sumida com> wrote:
Hello List There is a big campus network with several buildings, that the administration wants to administer and protect better. they want to decrease broadcast for IP addresses (DHCP), while they also have the idea about to use VLANs in order to separate users in several domains. however, users travel between buildings since they have activities on different buildings during the day. One consultant told me a user can connect his laptop on any building, and be given his fixed IP, while the switch port is dynamically added to the user VLAN all with the MAC Address, but they didn't tell me how. SO these are my questions, if you can give me more light into this: - Is this behavior part of the VLAN standard, or is there any vendor that can do this? - If this is not possible, is there any way to maintain users in their own "VLAN" while the printers on each building can be shared among all VLANs? I already proposed to cut broadcasts with a mixed switched/routed network, or in the open source side, with a Linux server on each building doing the DHCP connected to a Radius Server, connected to a LDAP. Please comment Thanks In Advance Gabriel --------------------------------------------------------------------------- EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The Norwich University program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Tailor your education to your own professional goals with degree customizations including Emergency Management, Business Continuity Planning, Computer Emergency Response Teams, and Digital Investigations. http://www.msia.norwich.edu/secfocus ---------------------------------------------------------------------------
--------------------------------------------------------------------------- EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The Norwich University program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Tailor your education to your own professional goals with degree customizations including Emergency Management, Business Continuity Planning, Computer Emergency Response Teams, and Digital Investigations. http://www.msia.norwich.edu/secfocus ---------------------------------------------------------------------------
Current thread:
- vnc server Jared Lyvers (Jan 23)
- Mobile VLAN Gabriel Orozco (Jan 24)
- Re: Mobile VLAN Bernardo Wernesback (Jan 25)
- Re: Mobile VLAN Rodrigo Blanco (Jan 26)
- Re: Mobile VLAN Bernardo Wernesback (Jan 25)
- RE: vnc server Brent P. Gardner (Jan 24)
- Re: vnc server Philippe De Ryck (Jan 24)
- readnotify.com Ebeling, Jr., Herman Frederick (Jan 24)
- Re: readnotify.com Ansgar -59cobalt- Wiechers (Jan 25)
- Re: readnotify.com Saqib Ali (Jan 26)
- Message not available
- Re: www.readnotify.com Saqib Ali (Jan 27)
- RE: www.readnotify.com Ebeling, Jr., Herman Frederick (Jan 27)
- Re: readnotify.com Ansgar -59cobalt- Wiechers (Jan 25)
- Mobile VLAN Gabriel Orozco (Jan 24)
- RE: www.readnotify.com Ebeling, Jr., Herman Frederick (Jan 27)