VLAN authentication
-
We have a workgroup network, is there a way of forcing authentication when someone plugs into the network with a cable? Could this be done with a VLAN + RADIUS server? Does anyone have any tips in this?
-
That sounds like a captive portal to me.
https://doc.pfsense.org/index.php/Captive_Portal -
802.1x pfSense not really involved. It'll all be in your switch.
-
802.1x pfSense not really involved. It'll all be in your switch.
Could this be achieved via dynamic VLAN allocation + RADIUS server (possibly freeradius2 on pfsense)?
-
You don't need dynamic VLANs. Just 802.1x on the ports which requires an AAA server - usually RADIUS.
It would probably be nice to have a guest VLAN for no login/failed logins that has no access to anything except maybe a redirected web server that tells people what to do or whom to contact for access. Depends on the scale of the project how much you want to put into it.
Dynamic VLANs allow you to place a port on a specific VLAN based on who logged into the port.
