Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Authentication and DHCP

0 views
Skip to first unread message

davi...@pcom.edu

unread,
Dec 11, 2003, 4:00:30 PM12/11/03
to
I would like to have users authenticate *before* obtaining an IP address.
This is a college campus and we are trying to prevent unauthorized people
from plugging laptops in and using services. Can this be done with Border
Manager... or some other solution? Thanks.

Craig Johnson

unread,
Dec 12, 2003, 6:59:25 PM12/12/03
to
How would these devices possibly communicate to some authentication system
without a communication protocol/address being assigned?

BMgr can control various activities based on NDS user, group or container -
primarily browsing. It does quite a good job of controlling browsing
activity with access rules, and will log user names in the process.

Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to http://www.craigjconsulting.com ***

Karl Reischl

unread,
Dec 19, 2003, 9:53:08 AM12/19/03
to
davi...@pcom.edu wrote:

> I would like to have users authenticate before obtaining an IP


> address. This is a college campus and we are trying to prevent
> unauthorized people from plugging laptops in and using services. Can
> this be done with Border Manager... or some other solution? Thanks.

You need to look at 802.1x - it's not a Novell product but a network
authentication protocol.

Instead of authenticating to the "server" you authenticate to the
switch port. Your switches need to support it also.

The back-end authentication is RADIUS servers and I *believe" BM 3.8
has the RADIUS from BMAS that supports 802.1x but I haven't had a
chance to try it yet.


--
Me, ambivalent? Well, yes and no.

Dave

unread,
Jan 13, 2004, 3:23:30 PM1/13/04
to
Unfortunately BM3.8 does not support 802.1x
"Karl Reischl" <kreischl@spamme_morainepark.edu> wrote in message
news:ohEEb.959$gu5...@prv-forum2.provo.novell.com...

Karl Reischl

unread,
Jan 22, 2004, 11:03:51 AM1/22/04
to
Dave wrote:

> Unfortunately BM3.8 does not support 802.1x

I was under the impression that the RADIUS NLM for 3.8 is from NMAS.
That's not correct?

Craig Johnson

unread,
Jan 22, 2004, 1:25:26 PM1/22/04
to
While the RADIUS component of BMgr is from the NMAS version of RADIUS
(I think that is the correct way to describe it), there may be little
else that is related to BMgr.

In any case, RADIUS is supposed to be decoupled from BMgr, and made
available as a free download. Updated attribute files should also be
available, if & when they are updated. I don't know when this change
is going to happen, but I think it is going to take place soon.

0 new messages