layer 2 access for consultants

[Adith_]

Dear Friends,

our network is having two vlans (20 and 30) data vlan is assigned to 20 & voice vlan 30.

we pushed the supplicant to all the domain users working fine.we have external consultants also in our network they dont have domain account and we dont want them to have the OAC installed in their laptops.

is it possible when they plug in their non OAC laptop will it put them in a guest vlan.

Regards

Adith

[CraigB_]

Adith, there are a couple of ways you can accomplish this.

The easiest way is to have your switch put any unauthenticated users onto a "guest" vlan that has limited network access or whatever access you like.

If you have UAC 3.x you can configure it to support non-OAC supplicants such as the Mcirosoft supplicant. You can allow anonymous authentication or setup the Guest User Access Management option on UAC to cover this.

Hope that helps.

If you need more assistance, please contact JTAC and open a new case.

Thanks

Craig Brauckmiller

[Adith_]

hi craig,

thanks for your reply

i used microsoft supplicant but we are using windows 2008 server.

Authentication is getting rejected by win2008

i did a packet capture and found server is sending reset packet

any suggeestion

Rgds

Adith

[CraigB_]

Without seeing a debug log from the IC, it will be hard to figure this one out. I can only suggest that you make sure to have EAP-PEAP with EAP-MSCHAPv2 enabled on the IC. Assuming this is done, you will need to contact JTAC for assistance going forward.

Thanks

Craig