Hi,
I need some ideas, I am about to split up a large network in to subnets. And my first task is to split the printers of in to there own privae network from the rest of the network devices.
They are mostly Dell printers although some are older HP's
Waht I want to know is the best method to do this using a central managed solution, while still leaving the current network as it is.
I need a solution that I can take forward for the pc's / servers as well. I was thinking of it tieing in to AD so I can assigne PC's to vlans based on there OU's.
But where to start ? Would Radius give this kind of control?
The network is almost completly cisco 3750's so i am thinking 802.1x?
Any ideas ?
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Hi,
Sorry I think you missed my point,
I know I can add the printers to an OU, but I was wondeiring what is the best central managment "sever /device" to talk between the Switchs and AD to assigen the switch ports to a VLAN based on OU group or any other credentials I require.
I am looking at implementign basic 802.1x / NAC on our network, and am wonding where is a good place to start from that can easly migrate in to a full NAC solution.
Yes,
RADIUS would be the way to go then
see
http://blog.scottlowe.org/
You can authenticate clients via AD in radius, and then apply vlans to groups
http://www.google.com/sear
Jfer
Hi there I understand seettign up AAA
for logins, enalbes, and for PPP links
but what I dont know is how you go about configuring a radius server and the switch for the specifice part of
"if item is in OU X assign port to VLAN Y. other wise port is in VLAN Z" I cant find that on the documents you suggested.
Hi,
I fouind the Cisco URT tool, but it may not work on 3750's
http://www.securitytechnet
Worth a shot
Jfer
I have decided to do this usiong 802.1x port base authentication.
this will aloow me with a radius server to authenticate the host PC's based on AD,
however now I have a problem with printers, they are not 802.1x, so i will ahve to fall back to mac address.
Dows any one know how you can use localy data bases (so i can set up mac address and localy user names) with the radius server built in to windows server? I can only see how to get it to authenticate using AD?
Hi,
was out most of the week.
You can accomplish the MAC authentication for your printers in RADIUS, in AD.
Here's a sample configuration for IAS to Cisco via RADIUS
http://www.tech-recipes.co
I have seen for printers to authenticate, make them User accounts in AD, where Name, and the password is the MAC address, but the password is MAC address in lower case.
http://www.experts-exchang
Hopes this gives you a better view of what you must do.
Jfer
Business Accounts
Answer for Membership
by: jfer0x01Posted on 2009-10-26 at 05:24:56ID: 25661511
Hi,
this is probably a design issue.
Consider that you are going to divide the large group into smaller groups, most likely, you will break the group into regions, or business functions.
For instance, California, Florida / or Sales, Accounting. Make the printers part of the OU's based on location, or roles, makes it easier and give the OU access to the printer.
Jfer