topic Re: Authentication question in Wireless

Authentication question

d.muccillo — Sat, 03 Jul 2021 23:00:29 GMT

setup is cisco acs for authentication. clients use PEAP/WPA/TKIP. I need to assign a static ip address for a specific login as access will be restricted for this ip. the problem is the user can potentially connect to the wireless network obtaining another address and have access. how can i set the login under the acs to be mapped to that ip address?

Re: Authentication question

Scott Fella — Tue, 10 Jun 2008 18:00:02 GMT

Why don't you just create a mac reservation in your dhcp server. That way they will always obtain the same ip address.

Re: Authentication question

d.muccillo — Tue, 10 Jun 2008 18:04:45 GMT

I intend on doing that but i am concerned if they input a static ip address that is not the one assigned to them or use a different laptop, they would then still be able to sign on with the account created on the radius server.

Re: Authentication question

dgroscost — Wed, 11 Jun 2008 23:27:19 GMT

Can you restrict the laptop?

Create another VLAN and assign that user via ACS to that VLAN?

Re: Authentication question

Scott Fella — Thu, 12 Jun 2008 01:45:29 GMT

Yes you can..... take a look at this doc. It should have all the info you need.

http://www.cisco.com/en/US/products/ps6366/products_configuration_example09186a00808c9bd1.shtml