Re: Mobile VLAN

[Rodrigo Blanco <rodrigo.blanco.r () gmail com>]

Hello,

in fact, these mechanisms are based on RADIUS attributes that are
downloaded to the client port upon successful IEEE 802.1x
authentication.

Almost any up-to-date switch should support at least basic 802.1x.

Regards,
Rodrigo.

On 1/25/06, Bernardo Wernesback <bernardosw () gmail com> wrote:
> Hi Gabriel,
>
> You can actually do this using extensions based on 802.1X authentication.
>
> Enterasys calls this SecureNetworks - you can set the VLAN, QoS,
> filters, etc. all based on which user is logged on the port! We've
> actually done a project using this and it really works.
>
> Cisco also has something similar - I believe they call it RBAC - but
> Enterasys is stronger in this arena.
>
> If you need more info e-mail me.
>
> See ya,
> Bernardo.
>
>
> On 1/23/06, Gabriel Orozco <gabriel_orozco () mx sumida com> wrote:
> > Hello List
> >
> > There is a big campus network with several buildings, that the
> > administration wants to administer and protect better.
> >
> > they want to decrease broadcast for IP addresses (DHCP), while they also
> > have the idea about to use VLANs in order to separate users in several
> > domains.
> >
> > however, users travel between buildings since they have activities on
> > different buildings during the day.
> >
> > One consultant told me a user can connect his laptop on any building,
> > and be given his fixed IP, while the switch port is dynamically added to
> > the user VLAN all with the MAC Address, but they didn't tell me how.
> >
> > SO these are my questions, if you can give me more light into this:
> > - Is this behavior part of the VLAN standard, or is there any vendor
> > that can do this?
> > - If this is not possible, is there any way to maintain users in their
> > own "VLAN" while the printers on each building can be shared among all
> > VLANs?
> >
> > I already proposed to cut broadcasts with a mixed switched/routed
> > network, or in the open source side, with a Linux server on each
> > building doing the DHCP connected to a Radius Server, connected to a LDAP.
> >
> > Please comment
> >
> > Thanks In Advance
> >
> > Gabriel
> >
> >
> >
> >
> >
> >
> > ---------------------------------------------------------------------------
> > EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> > The Norwich University program offers unparalleled Infosec management
> > education and the case study affords you unmatched consulting experience.
> > Tailor your education to your own professional goals with degree
> > customizations including Emergency Management, Business Continuity Planning,
> > Computer Emergency Response Teams, and Digital Investigations.
> >
> > http://www.msia.norwich.edu/secfocus
> > ---------------------------------------------------------------------------
>
> ---------------------------------------------------------------------------
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> The Norwich University program offers unparalleled Infosec management
> education and the case study affords you unmatched consulting experience.
> Tailor your education to your own professional goals with degree
> customizations including Emergency Management, Business Continuity Planning,
> Computer Emergency Response Teams, and Digital Investigations.
>
> http://www.msia.norwich.edu/secfocus
> ---------------------------------------------------------------------------

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------