05-01-2007 12:11 PM - edited 03-05-2019 03:48 PM
We have a network with several remote sites all connected to our main campus through a high speed metropolitan optical ethernet. We're running EIGRP and use a public class-b address space. We are strickly a layer-3 routed network in our WAN, core and distribution layer.
Now we're being asked to supply limited access for vendors who want to bring a laptop in, plug it into our network, and get internet access.
What is the best way to do that without going to a full-blown 802.1x world?
Is it through GRE tunnels on a private address space?
All ideas are welcome.
05-02-2007 02:51 AM
Hi,
Depends how many guest users come in, I would create a small subnet for them with restricted access and issue the static ip addresses. That will give yu control over them and easy to manage as well as easy to know that exactly what they been upto. Only a suggestion.
Regards,
05-02-2007 03:08 AM
HI,
1.Create a Subnet with minimum of 30 Hosts.
2.Create a VLAN name "Vendor" in Core Switch.
2.Create a access lists for this Subnet / VLAN in the Core Switch / Internet Router & permit only to access the HTTP / 80 Service.
Hope this Helps you.Pls Rate.
Best Regards,
Guru Prasad R
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide