Security Basics mailing list archives

Re: Port Security on switches?


From: Abe Getchell <me () abegetchell com>
Date: Fri, 14 Mar 2008 21:17:11 -0400

Sounds like you're looking for 802.1x enabled networking gear:

http://en.wikipedia.org/wiki/802.1X

How well it works/easy it is to manage depends on the gear you're using.
Most implementations have provisions for allowing unauthenticated
systems (such as vendors, visitors, or contractors) to have some form of
network access.

-  
Abe Getchell
me () abegetchell com
http://abegetchell.com/


On Fri, 2008-03-14 at 13:21 -0500, Albert R. Campa wrote:
Do you use it? Is it a good idea network wide? Yes I guess it could be
an administrative pain but I want to see how it is used these days.

Is there an alternative?

My concern is people connecting non authorized laptops to the network
and getting an IP then access. What is a common/effective way to be
notified of any new device connected to the network?

Sure we have physical security(guards 24/7) in our main building,
badge access security in our other building, but visitors such as
vendors, contractors, etc come often and its basically left up to
their sponsors to ensure they dont connect anything to a free port on
the wall.

Comments are appreciated.

Albert


Current thread: