Yet another Ruckus->Smoothwall thread!
I am in the process of replacing my existing Trapeze wireless network with a new Ruckus one. I currently have the following WLANS -
haz-x - 802.1x authentication against our RADIUS server for domain users and devices such as laptops
haz-m - MAC address authentication mainly for school owned mobile devices that need to access certain network resources. At the moment this is mainly iPads connecting to the Groupcall Emerge service that lives on the SIMS server
haz-guest - self explanatory really but devices on here get an IP address from a Cisco Pix firewall which itself sits on a seperate VLAN. Transparent proxy doesnt really work with this so clients have to be manually configured with the proxy
I'd like to replicate the functionality of the above and to that end I have got the 802.1x working. However I know MAC address authentication isnt that secure so I'm looking at the best way of allowing those devices that need access to Emerge etc but without compronmising security.
I'd also like to set up a BYoD for students that uses their AD credentials to authenticate (for example) but keeps them away from the rest of the network.
We have a Smoothwall UTM1000 and Extreme Black Diamond as a core switch
I'm sure there are several ways of skinning this particular cat and I wondered what preferred solution for you guys would be.