Should I Implement RADIUS

[Trojan]

Open question, should I implement RADIUS using NPS ?

 

Pro's / Con's... Any downsides from a user perspective ?

 

We use Extricom wireless if that makes a difference, currently a single SSID that all devices use.

 

Thanks in advance...

[smithson83]

I had a bit of a 'mare setting this up, but it was me missing something. But once it was set up it was great, just set a GP to allocate the SSID (hidden in our case) for the laptops to use, set another up for staff (so you can track who is using it), set up a third restricted guest one and don't look back.

 

Pro's: Its a lot more secure as you're not sharing the key (there isn't one, kinda)

Con's: You have to connect them to the network initially, either physically or via an "onramp" ssid so they can get the GP

 

**EDIT**

 

From a user perspective, if eg you set up one for staff, then they log on to the wireless as their NW username and password, so they don't have to come bothering you for the key. and then (depending on your wireless solution) you can see who is using it. if I need to find someone in school, I check to see which AP their phone is connected to, to narrow the search.

Edited December 8, 2014 by smithson83