Bind user to a switchport

csiszerakos2 · ‎01-23-2009

Hello,

I would like to bind my users to switchports. I could use port-security sticky but the administrative overhead seems very high. Has some experience with any third party or Cisco program which make it easier to mange it?

Another solution can be using 802.1x for user authentication and telling the switch not only the user vlan but the switchport. I am still looking for it, but have not found any RADIUS attrib for the switchport yet.

dhananjoy chowdhury · ‎01-25-2009

you can try some NAC solution, may be FreeNAC

http://freenac.net

csiszerakos2 · ‎01-26-2009

Thanks!

ronshuster · ‎01-27-2009

VMPS will work as well, I tried it in a lab, it does the job but could be a bit messy to setup.

csiszerakos2 · ‎01-29-2009

Thanks, I looked the web and found open-source VMPS servers (e.g: Icarus). It may be necessary to fine tune the code but seems ok.

ronshuster · ‎01-29-2009

I compiled the VMPS code without making any changes and it works just fine. You can also find Cisco documents online to assist you with the configuration of VMPS on the switches.