Mobile VLAN

[Gabriel Orozco <gabriel_orozco () mx sumida com>]

Hello List

There is a big campus network with several buildings, that the 
administration wants to administer and protect better.

they want to decrease broadcast for IP addresses (DHCP), while they also 
have the idea about to use VLANs in order to separate users in several 
domains.

however, users travel between buildings since they have activities on 
different buildings during the day.

One consultant told me a user can connect his laptop on any building, 
and be given his fixed IP, while the switch port is dynamically added to 
the user VLAN all with the MAC Address, but they didn't tell me how.

SO these are my questions, if you can give me more light into this:
- Is this behavior part of the VLAN standard, or is there any vendor 
that can do this?
- If this is not possible, is there any way to maintain users in their 
own "VLAN" while the printers on each building can be shared among all 
VLANs?

I already proposed to cut broadcasts with a mixed switched/routed 
network, or in the open source side, with a Linux server on each 
building doing the DHCP connected to a Radius Server, connected to a LDAP.

Please comment

Thanks In Advance

Gabriel




---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------