RE: Wireless or wired but not at same time

[Al Rivas <ARivas () hyphensolutions com>]

I notice you're using Cisco.  You could create the same VLANs as the users are currently in on your wired network.  
Then perhaps it wouldn't matter to you if both were active at the same time.

For guest access, what sort of service do you want to offer them ?  If say Internet only, I take it you've considered 
creating a new VLAN, call it Guest, use say WPA1 (many machines don't support wpa2 yet - well ok lots do but due to 
patch requirements we've noticed most users clueless but wpa1 seems pretty ubiquitous.

Then don't forget to create your ACLs to only allow Guest to go to the Internet, blocking all internal nets.

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of Borloz Daniel
Sent: Wednesday, June 18, 2008 4:12 AM
To: security-basics () lists securityfocus com
Subject: Wireless or wired but not at same time

Hello,

I have to create  a wireless access in all the conference room (about 20 in different location). We will use cisco 
material to do this. We want give access to either enterprise access or guest access. But there are several questions 
left.

I don't know which product would be interesting to use for managing right for a guest access ? What are you using ? It 
should be used by several non-technical people, be sufficiently granular (access for guest for several hours, half-day) 
and be sufficiently verbose to have reports of what the people did.

The second question concerns the cohabitation between wired and wireless connection. We don't want (especially my boss) 
that the two connection are active at the same time. When the laptop is connected through wire, it will not be possible 
to connect throught wireless. Has somebody face this problematic ? Is there a client that could control that ? We use 
mainly different Dell laptop, with different wireless cards.

A big thank you for all the answer and sorry for my bad english.


                Daniel Borloz.

Edipresse SA
Security & network engineer