Re: 802.1X for wired ports

[Daniel Bennett <dbennett () PCT EDU>]

James,

What technology do you utilize for the captive portal?

Daniel Bennett
IT Security Analyst
Pennsylvania College of Technology
P:570.329.4989
E:dbennett () pct edu



From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of James R. 
Pardonek
Sent: Thursday, June 17, 2010 7:18 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] 802.1X for wired ports


We use a captive portal that relies on radius to make sure that the individual is a student or staff. We require 
accounts for all who use our network. Those with no affiliation to Purdue require a sponsor. The sponsor is required to 
submit a form that contains the users information along with duration of use. We then create temporary credentials for 
that person. Our captive portal records the MAC address of the users computer along with the IP in case we have an 
issue.

James Pardonek CISSP
Senior Network Administrator
Purdue University Calumet

________________________________
From: The EDUCAUSE Security Constituent Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU>
To: SECURITY () LISTSERV EDUCAUSE EDU <SECURITY () LISTSERV EDUCAUSE EDU>
Sent: Wed Jun 16 15:18:24 2010
Subject: Re: [SECURITY] 802.1X for wired ports

On 16/06/2010, at 3:57 AM, David Gillett wrote:


  I believe 802.1X is a good solution for "inside" ports, but for "public access" ports a captive portal may be a 
better option -- redirects browser requests to a login -page and blocks other traffic until login succeeds).  We 
initially used BlueSocket for our wireless authentication, and it could easily be deployed this way.....

David Gillett

________________________________
From: Entwistle, Bruce [mailto:Bruce_Entwistle () REDLANDS EDU]
Sent: Monday, June 14, 2010 17:21
To: SECURITY () listserv educause edu<mailto:SECURITY () listserv educause edu>
Subject: [SECURITY] 802.1X for wired ports
We are currently looking for a method to secure wired ports located in locations accessible by the general public.  The 
network devices to which these ports are connected are Cisco 3750 switches.  I have tested port based authentication 
however I ran into the problem of not having the required supplicant installed.  We are trying to avoid having to do 
configuration on the client(student) machines.  I was looking to find out what others have done to prevent users 
outside the organization from simply connecting their computer through use of a patch cable and surfing the Internet.

Thank you
Bruce Entwistle
Network Manager
University of Redlands