Home page logo

basics logo Security Basics mailing list archives

Mobile VLAN
From: Gabriel Orozco <gabriel_orozco () mx sumida com>
Date: Mon, 23 Jan 2006 16:43:49 -0600

Hello List

There is a big campus network with several buildings, that the administration wants to administer and protect better.

they want to decrease broadcast for IP addresses (DHCP), while they also have the idea about to use VLANs in order to separate users in several domains.

however, users travel between buildings since they have activities on different buildings during the day.

One consultant told me a user can connect his laptop on any building, and be given his fixed IP, while the switch port is dynamically added to the user VLAN all with the MAC Address, but they didn't tell me how.

SO these are my questions, if you can give me more light into this:
- Is this behavior part of the VLAN standard, or is there any vendor that can do this? - If this is not possible, is there any way to maintain users in their own "VLAN" while the printers on each building can be shared among all VLANs?

I already proposed to cut broadcasts with a mixed switched/routed network, or in the open source side, with a Linux server on each building doing the DHCP connected to a Radius Server, connected to a LDAP.

Please comment

Thanks In Advance


The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]