Re: 802.1X for wired ports

["James R. Pardonek" <pardonjr () CALUMET PURDUE EDU>]

We use a captive portal that relies on radius to make sure that the individual is a student or staff. We require 
accounts for all who use our network. Those with no affiliation to Purdue require a sponsor. The sponsor is required to 
submit a form that contains the users information along with duration of use. We then create temporary credentials for 
that person. Our captive portal records the MAC address of the users computer along with the IP in case we have an 
issue. 

James Pardonek CISSP 
Senior Network Administrator 
Purdue University Calumet 


________________________________

From: The EDUCAUSE Security Constituent Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> 
To: SECURITY () LISTSERV EDUCAUSE EDU <SECURITY () LISTSERV EDUCAUSE EDU> 
Sent: Wed Jun 16 15:18:24 2010
Subject: Re: [SECURITY] 802.1X for wired ports 



On 16/06/2010, at 3:57 AM, David Gillett wrote:


        
          I believe 802.1X is a good solution for "inside" ports, but for "public access" ports a captive portal may be 
a better option -- redirects browser requests to a login -page and blocks other traffic until login succeeds).  We 
initially used BlueSocket for our wireless authentication, and it could easily be deployed this way.....
         
        David Gillett

________________________________

        From: Entwistle, Bruce [mailto:Bruce_Entwistle () REDLANDS EDU] 
        Sent: Monday, June 14, 2010 17:21
        To: SECURITY () listserv educause edu
        Subject: [SECURITY] 802.1X for wired ports
        
        
        We are currently looking for a method to secure wired ports located in locations accessible by the general 
public.  The network devices to which these ports are connected are Cisco 3750 switches.  I have tested port based 
authentication however I ran into the problem of not having the required supplicant installed.  We are trying to avoid 
having to do configuration on the client(student) machines.  I was looking to find out what others have done to prevent 
users outside the organization from simply connecting their computer through use of a patch cable and surfing the 
Internet.
         
        Thank you
        Bruce Entwistle
        Network Manager
        University of Redlands