We are currently using Bluesocket WG 2100 gateways for our wireless network at Penn. The setup is relatively simple with a few WG2100s around campus using school/department vlans on a central DHCP server and RADIUS authentication. We have has requests recently to pre-authenticate devices (most of these devices do not have web browsers to authenticate to the Bluesocket) via hardware address and/or IP address. I was wondering if anyone else is doing this? With the security consideration of allowing a MAC address into the protected network without login aside, capacity planning is high on my list. My main concerns are if there are any limitations via performance and/or resources after a certain number of devices are added and if it makes much of a difference to configure these devices globally on each WG or else with a MAC and IP on each vlan. Any thoughts or comments are appreciated.
Colleen Szymanik ------------------------------ University of Pennsylvania Network Engineer 215-573-2628
********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/cg/.