Re: [WIRELESS-LAN] PacketFence

2012-04-26 Thread Jeff Kell
On 4/26/2012 4:13 PM, Mark Duling wrote: > I think many have found enforcing remediation of NAC to be problematic > with an increasingly protected and sophisticated user base. Whether > or not to do posture assessment and enforce remediation seems to me to > be the main determinant of how much one

RE: [WIRELESS-LAN] PacketFence

2012-04-26 Thread Adam T. Ferrero
Fair enough regarding "NAC". Our custom "Get Connected" process has been in place for over a decade for wired Residence Hall connectivity. We have switch ports on a fixed vlan and we have two IP subnets on that vlan (call them registration and student). When the dhcp request comes across i

Re: [WIRELESS-LAN] PacketFence

2012-04-26 Thread Mark Duling
Hi Adam, My personal opinion is that NAC as a generic term has gotten almost too ambiguous to be useful. The Wikipedia entry for NAC says this: Initially 802.1X was also thought of as NAC. Some still consider 802.1X as > the most simple form of NAC, but most people think of NAC as something more

Re: PacketFence

2012-04-26 Thread Adam T. Ferrero
We have been using Packet Fence successfully since last summer. We reviewed it and a few other commercial offerings. It is our first NAC implementation and was prompted by the installation of 675 new wireless access points in our Residence Halls. We wanted a way to enforce a few rules on t