Re: Wired security improvements

On Jan 2, 2008 5:49 PM, Jesse Rink <jesse-rink@xxxxxxxxx> wrote:
Hello all.

I was hoping for some feedback on some improvement I'm hoping to make at a
couple of clients as it relates to their wired network.

A bit of a background...

<snip>
The following 5 methods are, as far as I see it, the potential options I
have:

1. Lockdown switchports by individual MAC addresses

Netdisco can help with this, somewhat. So can RANCID, if you have
Cisco equipment.

2. Implementing IPSec
3. 802.1x on the Wired network
4. A NAC device (HP, Cisco, etc.)

There are some open source NAC implementations. See FreeNAC, Netreg,
and Ungoliant.

5. MAC Authentication via RADIUS

Doesn't necessarily require MS IAS - FreeRadius and other OSS
implementations can do a lot of heavy lifting for you, if coupled with
LDAP.

Nice spread***, though.

Kurt

Quantcast