Re: Network ?

We've been working on a similar situation...   Our problem, like yours, is
that anyone can bring a wireless device into our coverage area, and after
a little packet sniffing, become a part of our LAN.

The solution that I'm currently proposing to our team is the use of RADIUS
servers containing the MAC addresses of all of the RF units.   The access
points that we use (Cisco/Aironet 350 series) can be configured to only
allow devices with certain MAC addresses.

I realize that this isn't foolproof, all they'd have to do is figure out a
valid MAC address...  but, even if they sniff one from the wireless LAN,
they've still got a problem:  that MAC address is already in use :)

We've also explored WEP (which is just too easy to break) and considered
the possibility, like you have, of putting the wireless devices on their
own segment, so that we can use a firewall to protect us further...  but
doing that would be very difficult with our current plant layout. :(

I don't see why the 802.1Q applies here.  That's a standard for VLANs, and
I don't see why you need a VLAN if you're using multiple network
interfaces???   They seem like they'd be alternatives to one another...
either you use multiple interfaces, or you use a VLAN...   why do you need
both?

At any rate, I've never heard of someone doing a VLAN on an iSeries, so
maybe there's no support...


On Thu, 19 Jun 2003, Mark Allen wrote:
>
> Here comes the part when I am just going to quote him as I have NO idea
> what he is talking about.  He needs to do if the AS/400 will support
> 802.1Q data tagging as he says he needs that to support the 2 virtual
> LANS???
>