[c-nsp] Ethernet Authentication

[Paul Stewart]

That raises a good and valid point.. There's really no reason we
couldn't run these customers in parallel right?  I had it in my head
that we would just have to switch them "overnight" and that would really
be an issue....

Thanks very much for the thoughts.. Appreciate it..

Paul
 

-----Original Message-----
From: Bill Nash [mailto:billn at odyssey.billn.net] 
Sent: Friday, June 30, 2006 5:35 PM
To: Paul Stewart
Cc: Matt Stockdale; cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] Ethernet Authentication


I would suggest making the transition to PPPOE anyway. Bring the PPPOE
configuration up in parallel, and work with the helpdesk to migrate the
users instead of cutting it over. Given the number of uncontrolled
elements in the equation, I think that's your best long term option.

- billn

On Fri, 30 Jun 2006, Paul Stewart wrote:

> Thanks... Unfortunately we have no way to track the user's MAC and it 
> can change of course....
>
> Paul Stewart
> Network Administrator
> Nexicom Inc.
> http://www.nexicom.net/
>
> -----Original Message-----
> From: Matt Stockdale [mailto:mstockda at logicworks.net]
> Sent: Friday, June 30, 2006 5:24 PM
> To: Paul Stewart
> Cc: cisco-nsp at puck.nether.net
> Subject: Re: [c-nsp] Ethernet Authentication
>
> centralize the DHCP server and have the 2621 relay the request? You 
> should be able to track users as long as you know their MAC.
>
> http://www.cisco.com/en/US/products/ps6350/products_configuration_guid
> e_
> chapter09186a00804412bf.html
>
> Matt
>
> On Fri, 2006-06-30 at 15:31 -0400, Paul Stewart wrote:
>> The subject may not be the right description but I'm trying to find a

>> way to authenticate a bunch of fixed-wireless customers currently...
>>
>> Here's my scenario:
>>
>> Remote POP with Cisco 2621 and Cisco 2924 or 2950 switch.  At the 
>> remote POP, Motorola Canopy or Trango fixed wireless customers are 
>> connected into the switch.  The Cisco 2621 provides DHCP to anyone 
>> connected as the Motorola and Trango both do their own proprietary 
>> radio authentication.
>>
>> The problem is that once the radio authenticates, then the end user 
>> computer gets an IP from the 2621 and they surf.  This is great until

>> you want to know who is on which IP address etc.  Obviously moving 
>> the
>
>> customers to PPPOE would work well, but that's a major change 
>> especially on one site where we might have to change 150-180 users at

>> once (our helpdesk would shoot me lol)
>>
>> Ideally, what I'd like to know if it's possible is some kind of 
>> authentication via a web browser linked to our existing Radius.  Is 
>> there a way to do this in IOS and/or 3rd party?  I was thinking of 
>> 802.x but all these customers connect across the same ethernet port 
>> in
>
>> most locations (or a few ports)...
>>
>> Thanks again to the list for your help...appreciate it...
>>
>> Paul Stewart
>> Network Administrator
>> Nexicom Inc.
>> http://www.nexicom.net/
>>
>> _______________________________________________
>> cisco-nsp mailing list  cisco-nsp at puck.nether.net 
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>>
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net 
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>