Wireless Access

Hi, have users with laptops docked and connected to the LAN via ethernet, and also wln card enabled.

 

They log in and authenticate via the wired interface but would like to remove the laptop and carry on working via the Wlan which is configured with an 802.1x profile machine and user auth but it does not work seamlessly, have to re auth or reboot.  I believe this is doable ??

 

Thanks

You would need to look at using certificates if you need this functionality.


Thanks,
Tim

Machine + user authentication works good if a user is on wireless most of the day.  It does not work well if they are on wired, because their machine authentication status times out on the wireless, and when they undock, they are only considered user authenticated.

 

Most people extend the machine authentication timer to account for the time they will not be on wireless.  Below is where you change it for ClearPass:

 

 

Cheers chaps,   were using radius on win domain,no clearpass.. Tim can you briefly explain why this will only work with certs ??

 

Thanks

You can issue certs to users which can be used for both wired and wireless authentications. Your policy can check to see if they have a valid cert from "X" CA and know that it's a valid computer and user.