Wireless Security/Support

[Michael Lymbery <mlymbery () SCU EDU AU>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I have been designing our wireless networking architecture at SCU and
we have gone through the obligatory VPN or WPA debate.  We had settled
on VPN for a variety of reasons but just recently I was asked to
re-evaluate WPA.

As part of the VPN design I included a transparent proxy/web server to
provide the function of allowing a user to connect to the wireless
network without a tunnel.  Then when they try to browse the
transparent proxy would redirect them to a web page HOWTO on
connecting which would contain a pre-configured VPN client and
connection instructions.  To do this we would have the client,
tranparent proxy and VPN interface on the same subnet.  The
transparent proxy would deliver DHCP addresses with itself as the
default gateway in order to catch all outgoing web-requests without
having the transparent proxy inline.  When the VPN client connects it
does so directly (doesn't need to be routed as it is on the same
subnet) thus bypassing the transparent-proxy for VPN access.  This is
all great for the VPN design but I have not found a similar method of
doing so if I was to use WPA.

We are using Cisco Aironet APs if that is helpful.  So to re-phrase, I
would like to know if anybody else has a similar support system in
place (transparent proxy with help pages) being used in conjunction
with WPA infrastructure.  My apologies if I am posting this on the
wrong list, just let me know and I will be on my way.

Thanks
Michael

- --
Michael Lymbery
Network Engineer

Information Technology and Telecommunication Services
Southern Cross University
PO Box 157 Lismore NSW 2480

Ph:  61 2 6620 3549
Fax: 61 2 6620 3033
Email: mlymbery () scu edu au
http://www.scu.edu.au
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCZPypuuXh/DTCOHURAksZAJ4t9/kXhkTsINNuB3Lq3VbrtJ16UQCffxGb
P7wnA1+9+kbzA0STzkJypt0=
=Fk3Y
-----END PGP SIGNATURE-----

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/groups/.