FWIW, we stopped playing "whack a mole" with adding ports to our game role. We let the games have complete Internet access but no campus access. That seems to work the best...
Greg Greg Schaffer, CISSP Director of Network Services Middle Tennessee State University -----Original Message----- From: Cisco Clean Access Users and Administrators [mailto:[EMAIL PROTECTED] On Behalf Of Robert J. Rutkowski Sent: Wednesday, January 23, 2008 2:58 PM To: [email protected] Subject: Re: Gaming Consoles Are you allowing certain ports with your internet-access-only bypass? I was going to try to simply add the goofy ports that the game systems need to the unauthenticated role, figuring nothing else would be using those ports and even if someone spoofed one of the game systems MAC addresses, they wouldn't have access to much... I tried to do the Xbox, followed the list of ports that Microsoft specified (UDP 88, UDP 3074, and TCP 3074) and the unit wouldn't pass the MTU test. Has anyone else had luck with this? Thanks Rob Robert J. Rutkowski Network Technician Keystone College [EMAIL PROTECTED] -----Original Message----- From: Cisco Clean Access Users and Administrators [mailto:[EMAIL PROTECTED] On Behalf Of Hennessey, Sean Sent: Tuesday, January 22, 2008 4:28 PM To: [email protected] Subject: Re: Gaming Consoles We give them a mac bypass into an internet-access-only VLAN. We haven't figured out anything better yet. We're In-band w/ virtual gateway. - Sean ++++++++++++++++++++++++++++ Sean Hennessey Network and Information Systems Administrator The University of Portland [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> (503) 943-7877 or on-site x7877 ________________________________ From: Cisco Clean Access Users and Administrators on behalf of Jeff Stewart Sent: Tue 1/22/2008 10:55 AM To: [email protected] Subject: Gaming Consoles Anyone doing anything besides 'wild cards' for gaming consoles? -- Jeff Stewart Network Engineer Network Computing & Support Western Kentucky University
