Advanced Windows PowerShell Scripting Video Training

Advanced Windows PowerShell Scripting Video Training
Advanced Windows PowerShell Scripting Video Training

Sunday, May 17, 2009

For 802.1X EC, do you need to set up a VLAN on your switches?

There are two approaches to implementing 802.1X NAP in your organization. You can utilize VLANs or Port ACLs. So the answer is maybe. If you go with the VLAN, you will have to bring in whom ever programs your switches to create you Unrestricted, Restricted, and guest VLANS. At that point, you can configure NPS to redirect client to where they need to go. You can also program Port ACLs on the switch. Have on policy tell the port that it is compliant, and another one for non-compliant. Your policies will tell the switch with ACL to use. Below is a blog from technet that describes this in more detail.


http://blogs.technet.com/wincat/archive/2008/08/19/network-access-protection-using-802-1x-vlan-s-or-port-acls-which-is-right-fir-you.aspx

No comments: