Hi,

> SSID Open: people will just connect to this on vlan 96 and instantly
> have access (firewalled downstream to limited outgoing ports)
>
> SSID Internal: people will connect to this on vlan 95, they will see the
> registration portal, authenticate (via a different RADIUS server), and
> then they will be switched to vlan 94 and have full network access
>

> Looking over your replies, I started to think that maybe the scheme you
> listed is more like for Guest access, they get the portal, and then
> users that want full network access will have to have some other type of
> credential and they never see a portal?
Correct.  That's the usual flow people will do.

In you case, if you want to have a fully open SSID, you put :
- OPEN
vlan 96

- SECURE
vlan 94 backup 95

The backup vlan is just a way to list more than one VLAN on the same SSID.


-- 
Francois Gaudreault, ing. jr
[email protected]  ::  +1.514.447.4918 (x130) ::  www.inverse.ca
Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence 
(www.packetfence.org)

------------------------------------------------------------------------------
Got visibility?
Most devs has no idea what their production app looks like.
Find out how fast your code is with AppDynamics Lite.
http://ad.doubleclick.net/clk;262219671;13503038;y?
http://info.appdynamics.com/FreeJavaPerformanceDownload.html
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to