@link2ali wrote:
Hi,
1. What circumstances would necessitate the use of OAC with UAC(IC appliance) ?
<CRAIG>OAC is first and foremost an 802.1X supplicant. This will allow you to perform L2 authentication (authenticate before you have an IP address). If you wish to have port based authentication with VLAN support, OAC is the correct option. It is the only choice when you need 802.1X with full Host Check support. Other 3rd party suplicants do not support the required protocols to enable Juniper's hostcheck software. Also, you can use OAC for machine based authentication as well as pre-logon authentication in the 802.1X environment.
2. What would be the additional advantages of using OAC vis-a-vis using agent-less UAC ?
<CRAIG>Again, agentless access is a layer 3 option and offer less security as compared to a layer 2 solution. Additionally, you must leave a browser window open during agentless access. You do have Host Check options with agentless.
3.Would there be any limitations or feature deficiency in case we do not use OAC with IC appliance ?
<CRAIG>Other then layer 2 security and being forced to use a browser for network access, not really.
Look forward to your advices and suggestions ?
Hope that helps.
Craig
