-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Lee,

On 15/12/2009 01:55, Lee H Badman wrote:
> Wondering how many other schools are using private IP space for
> wireless users, how you accomplish the NAT, and what mechanisms
> you use for user tracking for the private-public mappings for
> forensic/investigatory purposes.

(sorry for v. late thread response, just getting back to the list
after some time off)

Our wireless services use RFC1918 and route back to a pair of
Linux-based routing firewalls running in failover, doing NAT.
Nothing particularly special there.

We did develop some software in-house to create NetFlow v5 from the
NAT taking place on those boxes, which allows quite easy tracing of
user activity:

   http://search.cpan.org/perldoc?Net::Netfilter::NetFlow

HTH,

oliver.
- -- 
Oliver Gorwits, Network and Telecommunications Group,
Oxford University Computing Services
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAktGPZUACgkQ2NPq7pwWBt5NCwCePDTVkADCjMLkybQqrKeiYN2Y
aHYAn1t2x/ubRsIz2FRIvHF01LJtILZe
=X2r3
-----END PGP SIGNATURE-----

**********
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

Reply via email to