+ Post New Thread
Results 1 to 5 of 5
Wired Networks Thread, Limit wired connections and users? in Technical; Hi All, Hopefully someone can help me out here with what I thought would have been a relatively easy task, ...
  1. #1

    Join Date
    May 2008
    Location
    Thailand
    Posts
    13
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Limit wired connections and users?

    Hi All,

    Hopefully someone can help me out here with what I thought would have been a relatively easy task, but my network admin tells me he can't do it.

    We rolled out Ruckus wireless last summer and it has been excellent. We used PSK to authenticate against AD and we can tell who, what and where on our wireless network. Problem is, we have LAN ports all over the school and in residential buildings as both staff and students live on campus. Once we put authentication on the wireless the sessions and users went down for a while and the network was stable, but then they realised they could just plug in and go. We are a BYOD school, primarily Mac based.

    Essentially what I am looking for is something like the Ruckus ZD for wired networks. I would prefer to just pull all cables but have been told I can't by SLT. Our network is unable to cope with the sessions. We have only 400 students P-12 but often have over 500 devices connected during the day. Sometimes the sessions get so high that the UTM (Untangle) just crashes under the load.

    Anyone got any advice as to how to lock down the wired network down that I can pass on to my network admin?

    Cheers

  2. #2
    Duke5A's Avatar
    Join Date
    Jul 2010
    Posts
    731
    Thank Post
    74
    Thanked 113 Times in 99 Posts
    Blog Entries
    8
    Rep Power
    27
    Give this a read: 802.1X Authenticated Wired Access Overview

    You can setup 802.1x on a wired network just like you can a wireless network. If you don't have AD credentials that match the criteria setup on your Radius server, you don't get on. You do need managed switches though that are capable of supporting this and I don't know how it would play out with Macs. Another option is to look into port security on the switches. It's basically MAC filtering like what you would find on wireless routers/access points only it's for wired ports. Either way though, you're going to be adding overhead to your managing of the network.

  3. #3

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    8,941
    Thank Post
    232
    Thanked 1,510 Times in 1,206 Posts
    Rep Power
    328
    If you have managed switches, disable the ports as required. This means you can re-enable ports as required and don't need to remove any patch cables.

  4. Thanks to Michael from:

    TheScarfedOne (12th February 2013)

  5. #4


    Join Date
    Jan 2006
    Posts
    8,202
    Thank Post
    442
    Thanked 1,032 Times in 812 Posts
    Rep Power
    338
    Quote Originally Posted by Michael View Post
    If you have managed switches, disable the ports as required. This means you can re-enable ports as required and don't need to remove any patch cables.
    If you have managed switches, you should be able to do this dynamically - bandwidth violation = disconnection.
    PacketFence: Open Source NAC (Network Access Control)

  6. Thanks to CyberNerd from:

    boombah (13th February 2013)

  7. #5

    Join Date
    May 2008
    Location
    Thailand
    Posts
    13
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Thanks for the responses. Looking into PacketFence now, looks pretty much like what we are after, now I just have to see if we can get it working.

    Our switches are capable, but we have many dodgy switches that are linked to each other so it wont work just yet. It takes a while to get things sorted here in Thailand. It might be an option going forwards as well.

    Cheers

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 11
    Last Post: 14th November 2011, 07:00 PM
  2. Outlook and user permissions?
    By Jake in forum Windows
    Replies: 7
    Last Post: 6th March 2007, 01:05 PM
  3. Wireless connects and drops for users
    By Disorder in forum Wireless Networks
    Replies: 3
    Last Post: 31st January 2007, 09:19 PM
  4. Replies: 0
    Last Post: 16th June 2006, 09:00 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •