John McDonnell wrote:
> I'm not doing any dynamic VLAN assignments over the wireless so I really 
> don't see any need for MAC authentication and just see it as unneeded 
> overhead. Is there any reason why I'm wrong with this assumption?

  It never hurts.  You can do *both* EAP && MAC auth at the same time.
It stops people who share their passwords.  If you do login tracking,
you can see if two MACs have logged in at the same time, too.

  This stops a large percentage of bad behavior.

  If you're *not* tracking MACs right now, you have no idea who's on
your network.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to