What attribute do you use to transmit the user's group within RADIUS? On Wed, Jun 24, 2009 at 11:08 AM, Lee H Badman <[email protected]> wrote:
> Hi Tom, > > > > We use forwarding of RADIUS accounting data (as users authenticate to > 802.1x) into our NAC system- (using Cisco LWAPP, ACS and Impulse NAC)-works > pretty well for single sign-on effect. Especially with the cached > credentials for the supplicant- the whole thing ends up transparent to the > user. > > > > Lee H. Badman > > Wireless/Network Engineer > > Information Technology and Services > > Syracuse University > > 315 443-3003 > ------------------------------ > > *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto: > [email protected]] *On Behalf Of *Tom Parenti > *Sent:* Wednesday, June 24, 2009 9:25 AM > *To:* [email protected] > *Subject:* [WIRELESS-LAN] Student 802.1x > > > > Hello All, > > > We are looking to start doing 802.1x authentication on our student > wireless. We are an Aruba customer and we use Cisco NAC. > > > > Today we have an open SSID. The students connect to the SSID, open a web > browser and are redirected to the Cisco NAC log on page. We would like to > continue with the single sign on with NAC if possible. I think that would > mean the students would have to cache their credentials in the supplicant to > get authenticated to the new 802.1x SSID. Student computers are not part of > our domain. > > > > Has anyone had any experience setting up 802.1x with NAC? > > > > Thanks, > > Tom > > *________________________* > > *Tom Parenti* > > Network Administrator > > Johnson & Wales University > > 8 Abbott Park Place > > Providence, RI 02903 > > (401) 598-1557 > > > > > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/groups/. > > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/groups/. > > ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
