By the way, this is good information, and I'll tuck that away as well, since we will need this.
John On Wed, Jun 24, 2009 at 1:50 PM, Mike King <m...@mpking.com> wrote: > Tom, Nobody has said it yet (which I'm surprised) > You might want to look into http://www.cloudpath.net/ which is program > you can distribute that will auto configure the 802.1x settings on client > machines. Many universitys and colleges publish an Open SSID that lands on > a captive portal that just displays this program. The program will then > autoconfigure they're supplicant to authenticated to the network. > > > > On Wed, Jun 24, 2009 at 2:11 PM, John Rodkey <rod...@westmont.edu> wrote: > >> What attribute do you use to transmit the user's group within RADIUS? >> >> >> On Wed, Jun 24, 2009 at 11:08 AM, Lee H Badman <lhbad...@syr.edu> wrote: >> >>> Hi Tom, >>> >>> >>> >>> We use forwarding of RADIUS accounting data (as users authenticate to >>> 802.1x) into our NAC system- (using Cisco LWAPP, ACS and Impulse NAC)-works >>> pretty well for single sign-on effect. Especially with the cached >>> credentials for the supplicant- the whole thing ends up transparent to the >>> user. >>> >>> >>> >>> Lee H. Badman >>> >>> Wireless/Network Engineer >>> >>> Information Technology and Services >>> >>> Syracuse University >>> >>> 315 443-3003 >>> ------------------------------ >>> >>> *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto: >>> wireless-...@listserv.educause.edu] *On Behalf Of *Tom Parenti >>> *Sent:* Wednesday, June 24, 2009 9:25 AM >>> >>> *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU >>> *Subject:* [WIRELESS-LAN] Student 802.1x >>> >>> >>> >>> Hello All, >>> >>> >>> We are looking to start doing 802.1x authentication on our student >>> wireless. We are an Aruba customer and we use Cisco NAC. >>> >>> >>> >>> Today we have an open SSID. The students connect to the SSID, open a web >>> browser and are redirected to the Cisco NAC log on page. We would like to >>> continue with the single sign on with NAC if possible. I think that would >>> mean the students would have to cache their credentials in the supplicant to >>> get authenticated to the new 802.1x SSID. Student computers are not part of >>> our domain. >>> >>> >>> >>> Has anyone had any experience setting up 802.1x with NAC? >>> >>> >>> >>> Thanks, >>> >>> Tom >>> >>> *________________________* >>> >>> *Tom Parenti* >>> >>> Network Administrator >>> >>> Johnson & Wales University >>> >>> 8 Abbott Park Place >>> >>> Providence, RI 02903 >>> >>> (401) 598-1557 >>> >>> >>> >>> >>> ********** Participation and subscription information for this EDUCAUSE >>> Constituent Group discussion list can be found at >>> http://www.educause.edu/groups/. >>> >>> ********** Participation and subscription information for this EDUCAUSE >>> Constituent Group discussion list can be found at >>> http://www.educause.edu/groups/. >>> >>> >> ********** Participation and subscription information for this EDUCAUSE >> Constituent Group discussion list can be found at >> http://www.educause.edu/groups/. >> >> > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/groups/. > > ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
