topic Re: Wireless/Wired Connections in Wireless

Wireless/Wired Connections

bradbrookc — Sat, 03 Jul 2021 22:36:14 GMT

What, if any would be the best solution to deal with users connecting to a wired infrastructure but also connected to another organization wireless? We want to only permit wired when connected. The end users are not domain controlled but 802.1x authenticated. Options? much appreciated.

Re: Wireless/Wired Connections

sabhasin — Fri, 28 Mar 2008 04:32:36 GMT

one way to do this would be with a supplicant (CSSC). another would be to use CSA (Cisco security Agent)...

Re: Wireless/Wired Connections

jafrazie — Sat, 29 Mar 2008 03:56:21 GMT

Do you mean you need to kill WLAN when connected to wired and/or vice-versa?

Re: Wireless/Wired Connections

bradbrookc — Mon, 31 Mar 2008 13:47:31 GMT

Correct, since potentially the WLAN is another org's

Re: Wireless/Wired Connections

bcolvin — Tue, 01 Apr 2008 06:05:23 GMT

one solution is Network Access Quarantine provided by Microsoft IAS/Radius server. As part of the authentication process a script is run on the client to verify it meets the requirements for connection to the network

Here is a link to a white paper describing the features.

http://download.microsoft.com/download/0/7/e/07ed1953-0ab5-41ea-b5da-41cf8bb9cdae/Quarantine.doc

The client does not have to be a member of the domain.

Bill

Re: Wireless/Wired Connections

bradbrookc — Tue, 01 Apr 2008 14:18:40 GMT

Thanks Bill, that's great. Do you know of any way to accomplish the same with freeradius? IAS is nice but doesn't support as many EAP types as we require.

thanks

Re: Wireless/Wired Connections

bcolvin — Wed, 02 Apr 2008 04:44:36 GMT

I don't know of any solutions of this type that don't cost money.

Is it possible for you clients to standardize on one tyoe of EAP to connect to your system.

good luck

Bill

Re: Wireless/Wired Connections

jafrazie — Wed, 02 Apr 2008 05:01:58 GMT

It should be possible for you to load a client that disallows/favors one type of media or the other. i.e. Disable WLAN is wire is plugged in, etc.

Re: Wireless/Wired Connections

bradbrookc — Wed, 02 Apr 2008 16:36:18 GMT

which client would recommend?

Re: Wireless/Wired Connections

pablo1711 — Thu, 17 Apr 2008 23:46:12 GMT

Juniper Odyssey Access Client.

This can be modified by an Admin and a user MSI file can be produced.

Once of the options is to overide WLAN when the device is connected to the Wired network. You can also restrict wireless access to certain SSIDs or just to WLANs with certain security critera

Chargeable client though at about $50 a seat. There is a 15 day full functional demo available to download from the Juniper site.

HTH

Paul