Version 4.1.2.0 Agent 4.1.2.0
We use the Mac filter option. We have to manually add sony Viao's with a check and student role option Before adding a filter we check the mac address against the IEE database http://standards.ieee.org/regauth/oui/index.shtml 00:0D:3A:* Microsoft-XBox ROLE: Game-0708 00:12:5A:* Microsoft-XBox ROLE: Game-0708 00:50:F2:* Microsoft-XBox ROLE: Game-0708 00:01:4A:* Sony-PS2-PSP ROLE: Game-0708 00:02:C7:* Sony-PS2-PSP ROLE: Game-0708 00:04:1F:* Sony-PS2-PSP ROLE: Game-0708 00:13:15:* Sony-PS2-PSP ROLE: Game-0708 00:09:BF:* Nintendo ROLE: Game-0708 00:17:AB:* Nintendo-Wii ROLE: Game-0708 00:17:FA:* Microsoft-XBOX ROLE: Game-0708 00:15:C1:* Sony Playstation 3 ROLE: Game-0708 00:11:D9:* TiVo ROLE: Game-0708 00:19:C5:* Sony Playstation3 ROLE: Game-0708 We block access to the internal server subnets but allow outbound connections and connections between residential subnets. This is how we find the Sony Viao's. This option does not give us who has it but allows them to just work and no technical person has to touch them. todd ________________________________ From: Cisco Clean Access Users and Administrators [mailto:[EMAIL PROTECTED] On Behalf Of Muhammad Ismail Sent: Thursday, September 06, 2007 4:04 PM To: [email protected] Subject: Game Consoles We are interested to know how others are handing game consoles (playstations/xbox/wii etc.). I have so far come across two different approaches: 1. Students submit their MAC addresses (through forms or paper) and then IT add these to the list of exempt devices in CAM. 2. IT has a list of allowed MAC addresses in a filter and assign these devices a role. Within this role the device can only connect to certain ports. The MAC addresses are wild cards for popular game console vendors. It may not be comprehensive list and there is a potential that some other computing devices share the same octet for these MAC addresses. Don't know for sure. So what are the other thoughts out there and for those who just do not allow these devices at all, what is the rational behind that decision. If this topic has already been discussed in the past, please forward me the discussions/results. Thanks in advance. P.S. Would it not be cool if Cisco provide a list of known game servers/ know game console vendors MAC octets or something we can pick from. And a role which we can assign safely to these devices.
