ate: Tuesday, January 30, 2018 at 1:27 PM
To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: Re: [WIRELESS-LAN] Packetfence - Aruba Webauth
Hi Jason,
The University of Wyoming is working on that now.
Troy
From: The EDUCAUSE Wireless Issues C
Hi Adam,
My personal opinion is that NAC as a generic term has gotten almost too
ambiguous to be useful. The Wikipedia entry for NAC says this:
Initially 802.1X was also thought of as NAC. Some still consider 802.1X as
the most simple form of NAC, but most people think of NAC as something
Fair enough regarding NAC. Our custom Get Connected process has been in
place for over a decade for wired Residence Hall connectivity. We have switch
ports on a fixed vlan and we have two IP subnets on that vlan (call them
registration and student). When the dhcp request comes across
The last time I looked at it (years and years ago), it used dns spoofing to
capture/redirect clients? My first thought was that it would not work w/
dnssec, so I haven't looked at it since and would be curious if that
changed.
Dale
Thus spake Johnson, Neil M (neil-john...@uiowa.edu) on Thu,
It used ARP spoofing (which is the last time I used it in a past job) and
has changed quite a bit.
I know Weber State uses it and Tristan (their network engineer) often
promotes it on the NETMAN list, as shown in this post:
We started to look at PacketFence but before even getting to test it Cisco
released ISE and then we switched to kicking the tires on that. Though I
know some universities use PacketFence quite successfully, for all the
strengths of the open source way the hassles of it in a product like that
We use PacketFence in our residence system, but do not use it over wireless.
The VLAN isolation model has worked tremendously for us. We have not
implemented the NAC portion of it (basically it uses NEssus scanning from
what I can tell), we're using it more for simple registration/tracking of
