>On the other hand, I think I've narrowed down my choices for NAC. I
>will look further into UNI-FY, but right now I think my best option,
>without having to go to open-wrt or whatever, with some version of
>chilli (or derivative) integration, is looking like ZeroShell:
>
>http://www.zeroshell.net
On Thu, 2008-12-18 at 15:05 +0100, Alan DeKok wrote:
> kevin wrote:
> > IOW, when using WISPr-Bandwidth, does that modify the client connection
> > at the client computer or does that occur at a proxy or firewall device?
>
> The RADIUS client (NAS) that receives the WISPr-Bandwidth attribute is
kevin wrote:
> IOW, when using WISPr-Bandwidth, does that modify the client connection
> at the client computer or does that occur at a proxy or firewall device?
The RADIUS client (NAS) that receives the WISPr-Bandwidth attribute is
responsible for enforcing it.
> What I'm getting at is, is a c
Thanks, Leigh...
Yes, that does make more sense. How you explained it.
So basically, I would need to put a NAC (network access controller) at
each remote location. BUT... I wouldn't necessarily have to put a
"traditional" captive portal at each location, even though they would
probably provide
>IOW, when using WISPr-Bandwidth, does that modify the client connection
>at the client computer or does that occur at a proxy or firewall device?
When you use bandwidth control attributes they are used by your NAS (AP,
router, switch, captive portal ...). You should read NAS documentation
to find
Hello Kevin,
I can't answer definitively, but I would assume that it would be done on
your NAS(depending on your hardware these rules "could" be propagated to the
child devices). It would defy all logic for it to be done on the client,
Just as you would in an unauthenticated wired/wireless network
While an "out of the box" solution is where I'll probably end up, I'm
battling with myself over the idea of how to best manage bandwidth on a
network including multiple remote locations, with both wired and
wireless connections.
I'm moving to using freeradius to authenticate (which ultimately will
7 matches
Mail list logo