[920] in resnet
Re: Forced Registration & DHCP
daemon@ATHENA.MIT.EDU (Ed Beadel)
Thu Feb 28 18:14:43 2002
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-ID: <3C7EB6E6.BD729AB3@oswego.edu>
Date: Thu, 28 Feb 2002 18:01:58 -0500
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: Ed Beadel <beadel@OSWEGO.EDU>
To: RESNET-L@listserv.nd.edu
SUNY at Oswego forces the users to register their hardware (MAC)
addresses. Our system for RESNet uses the dynamic VLAN (VMPS) feature on
Cisco switches. If we don't know the MAC address the user is placed in a
non routed VLAN named "DUMMY". DHCP on the DUMMY VLAN issues an address
in the 192.168.69.0/24 network and points them to a DNS server on that
VLAN. A tweak of the DNS serving that VLAN forces every address to
resolve to our registration page. After the student is authenticated
they are authorized (RADIUS w/ LDAP back end which is fed from nis and
Oracle) to register their email account, set their email address to
whatever service they desire, and register (or deregister) their machine
with us. They are then registered in the VLAN for the Res. Hall they
live in. This registration process consists of making an entry for a
static address in DHCP (BOOTP like), making an entry in DNS, /etc/hosts,
and the VMPS database. This information is pushed or pulled to or from
the various required servers on campus.
Next time they fire up their machine the switch checks that they
are
registered with VMPS, if so they are placed in the VLAN they are
registered to, receive their network settings via DHCP and are on their
way. This procedure has greatly speeded up the registration process
while keeping us in control of who gets on the network. MAC address
leads to user's name, users port (Via CiscoWorks), phone number etc.
Thus we can track security violations, excessive network use, DMCA
issues, rouge servers, etc. This has also helped in the retention of our
RESNet employees!
Hope this helps,
Ed Beadel, Director of Network Services
SUNY at Oswego, Oswego, NY
Keri Budnovitch wrote:
>
> Hello,
>
> I am from Rutgers University and we have approximately 10,000+ resnet connections. We are using static IP addresses. I am anxious to switch to DCHP and forced registration to make it easier on the Help Desk at the beginning of the semesters.
>
> There have been concerns about switching to DHCP because of the possibility of students running their own DHCP servers, especially with Win XP. Can anyone share if they have similar concerns and how you plan to handle it? Also, feel free to list your experience with the pros and cons of DHCP vs. static IPs.
>
> Also, do you suggest forcing students to register their computer from day one?
>
> Any insight would be appreciated.
>
> Thanks!
> Keri
>
> _______________________________________________________
> Keri Budnovitch, Manager, Help Desk and Educational Services
> RUCS - New Brunswick Computing Services
> 54 Joyce Kilmer Ave, Lucy Stone Hall B304
> Piscataway, NJ 08854-8045 Voice: 732-445-6967
> kbudnov@mssg.rutgers.edu Fax: 732-445-3332
> Help Desk: 732-445-HELP (4357)
>
> ___________________________________________________
> You are subscribed to the ResNet-L mailing list.
>
> To subscribe, unsubscribe or search the archives,
> go to http://LISTSERV.ND.EDU/archives/resnet-l.html
> ___________________________________________________
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
