Dot1x OPort Control & Quarantine VLAN

[bradleyordner]

Hi,

I was wondering if it is possible to use Dot1X Port Control on a Wireless Network.

What we would like is when a user trys to authenticate with PEAP-MSCHAPV2, if they pass they are allowed access to the WLAN. If they fail authentication they are moved to a Quarantine VLAN.

Is this possible with configuration, like dot1x port control on a switch or do we need a NAC Appliance?

Thanks in advance,

Brad

[George Stefanick]

Yes, you can do something like you proposed without NAC. The question is what you mean by "Quarantine". The user would just get dumped in a hole until his logon was corrected. He wouldnt get a "deny" screen or anything pretty ....