There are better ways. Guest-VLAN
Guest-VRF
Connections from guest to everywhere (incl. Internet and clearly identified
internal resources) are controlled through a security center (Fw, IPS,
SSL-VPN...). Ext usrs must authenticate on sec.center.
Kr,
Thomas
"John" <spam001(at)plasticcircus(dot)com> wrote in message
news:Oy9nWhXIGHA.3000@xxxxxxxxxxxxxxxxxxxxxxx >I am using IAS to allow only domain computers to connect to our office WLAN
>and it works great. all of the domain computers connect fine.
>
> but I sometimes need to allow other computers that aren't members of our
> domain such as outside contractors, and clients to access the internet.
>
> how would I go about setting up a new policy to only require a password,
> to access the network? or are there better ways to approach this. any
> white papers?
>
> -john
>
Re: Ban RAS clients on DHCP ... Ok Marcus, I hear what you are saying so I will let it drop here. ... >> found on routers that does not use NAT or PAT and private IPs.... >> then those should be dedicated to internet accessible machines only. ... (microsoft.public.windows.server.general)
Re: Ban RAS clients on DHCP ... found on routers that does not use NAT or PAT and private IPs. ... there is no reason to have an entire class c network of public IPs.... then those should be dedicated to internet accessible machines only. ... There is no plausible reason to ever use public IPs on your network. ... (microsoft.public.windows.server.general)
Re: Ban RAS clients on DHCP ... But how to tell DHCP server to assign this addresses to RAS clients and other to the rest clients. ... and**sigh** get more IPs or use private IPs for them. ... Niether myself nor anyone who answered knows of a DHCP system that will "ban" these kinds of requests. ...Internet provider have Virus and worms detectors installed on routers thus if they will block one IP numbers all IP numbers in private series behind that one will be blocked. ... (microsoft.public.windows.server.general)
Re: Ban RAS clients on DHCP ... nothing restrictive to the client in using private IPs.... found on routers that does not use NAT or PAT and private IPs....Internet provider have Virus and worms detectors installed on routers thus if they will block one IP numbers all IP numbers in private series behind that one will be blocked. ... I am hearing you say that visitor machines are misconfigured. ... (microsoft.public.windows.server.general)
