[26745] in resnet
Re: 802.1x and gaming machines
daemon@ATHENA.MIT.EDU (Joshua Coleman)
Tue Sep 13 20:18:56 2011
Content-Language: en-US
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Message-ID: <FC26C4C7BD1B7F499BBF2829CF950155063FBC6C@DSAEXMB.housing.ufl.edu>
Date: Wed, 14 Sep 2011 00:16:01 +0000
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: Joshua Coleman <JoshuaC@housing.ufl.edu>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <alpine.BSF.2.00.1109091343380.7760@qrswnz.pp.fgengu.np.hx>
I developed the system that Matt is talking about and the web interface is just your basic LAMP with some java-script that checks as you type weather or not you've entered a valid MAC (12 numbers or letters [a-f] ignoring : and - (if not you can't submit)), this information (plus login name) is written to a mysql "requests" table and an email for approval is sent to our staff, also included in our page is a select box for type (xbox, playstation, tivo, etc. and other which requires a description field). The approval page is LAMP as well but the it also display's the IEEE-OUI listing for the submitted MAC address (an xbox request with an apple mac gets denied and an email to resubmit is sent).
We use freeradius as our radius server and back-end it with 2 different AD's and mysql.
Now the part I'm proud of, an approved MAB request inserts a record into the rad_check table but it also inserts into rad_reply the registered username (and Cisco switches send all accounting packets with this username) which is then checked against the group table, so searching by username X brings up their complete history including MAB) and restricting or quarantining a user has the same effect.
Joshua Coleman | Network Infrastructure Engineer
University of Florida Department of Housing and Residence Education
PO Box 112100 | Gainesville, FL 32611-2100
office 352.392.2171 x12053 | fax 352.392.6819 | JoshuaC@housing.ufl.edu
Before printing this email think if it is necessary.
________________________________________
From: Resnet Forum [RESNET-L@LISTSERV.ND.EDU] on behalf of Jethro R Binks [jethro.binks@strath.ac.uk]es
Sent: Friday, September 09, 2011 8:44 AM
To: RESNET-L@LISTSERV.ND.EDU
Subject: Re: 802.1x and gaming machines
On Fri, 9 Sep 2011, Matt Pendleton wrote:
> On our wired 802.1x system, we are using Mac-Auth-Bypass for the gaming
> systems. There is just no support from Microsoft, Sony, or Nintendo to
> put 802.1x native. We are completely Cisco so I do know if other
> network systems support that. We have the students register their wired
> MAC address via a web interface and approval system. It has worked
> quite well for us and we support all the gaming systems as well as other
> entertainment devices like TVs, BluRay's, and TiVo's/DVR's.
Many sites seem to do something similar; but I'd be interested to hear how
they are implementing this web interface - what tools/products?
Jethro.
. . . . . . . . . . . . . . . . . . . . . . . . .
Jethro R Binks, Network Manager,
Information Services Directorate, University Of Strathclyde, Glasgow, UK
The University of Strathclyde is a charitable body, registered in
Scotland, number SC015263.
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
