John Duran wrote: > Good Morning All, > > Who is using NAC (Network Access Control) for wireless client > authentication and posturing? > 1) What solution did you select? > 2) How easily did it integrate with you existing infrastructure? > 3) What is you existing infrastructure and wireless solution? > 4) How well has it performed? > 5) If you had to do it again would you select the same product? > 6) What were the success and failures of the deployment? > 7) What was the impact on your technical staff to prepare for deployment? > 8) How well does it scale? > 9) How are the management tools and maintenance for the solution?
When our wireless was provided by "heavy" access points, there was no separate wireless LAN from the wired one. Now that we've gone to lightweight APs, we run that LAN through another Cisco Clean Access server, just like we've done for the wired side. In that regard, there was no difference from the users' side, and little of consequence on our side, either. It's done all right. We're considering alternative NAC products, but Cisco remains under consideration. The obstacle lies in problems with the software Agent that would be installed on users' systems, and the inherent bottleneck/single point of failure an in-band system presents. Our backbone is not Cisco, so out-of-band isn't really an option. But we're a small school; your mileage may vary. -- Regards, -- Cal Frye, Network Administrator, Oberlin College www.calfrye.com, www.pitalabs.com "All serious daring starts from within." --Eudora Welty. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
