Dodger wrote:
> Hi,
> 
> any idea is highly appreciated,

802.1x solves this.  When a device 802.1x authenticates, it doesn't save
the role in packetfence, so the next time that device is seen, it has to
re-authenticate.

Another option is to use the timers in packetfence to "expire" them
rapidly.  That still leaves open a window of opportunity for an
attacker, but it's much smaller than no timer at all.

> best,
> 
> dodger

-- 
---------------------------
Jason 'XenoPhage' Frisvold
[email protected]
---------------------------

"Any sufficiently advanced magic is indistinguishable from technology.\"
- Niven's Inverse of Clarke's Third Law

------------------------------------------------------------------------------
CenturyLink Cloud: The Leader in Enterprise Cloud Services.
Learn Why More Businesses Are Choosing CenturyLink Cloud For
Critical Workloads, Development Environments & Everything In Between.
Get a Quote or Start a Free Trial Today. 
http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to