We've implemented 802.1x with dynamic vlan assignment already, meaning that when a user connects either wired or wirelessly they get shunted into the appropriate segment of the network (and potentially into overlapping subnets). This ensures strong segregation based on their identity/certificate. So we really want to plug openvpn into that and allow users a single certificate to always end up in their same segregated section of the network without having to create separate VPN subnets for them.
TLDR: These patches allow OpenVPN to be used in enterprise environments with RADIUS authentication and dynamic VLAN assignments.
1 comment
[ 0.25 ms ] story [ 9.8 ms ] threadWe've implemented 802.1x with dynamic vlan assignment already, meaning that when a user connects either wired or wirelessly they get shunted into the appropriate segment of the network (and potentially into overlapping subnets). This ensures strong segregation based on their identity/certificate. So we really want to plug openvpn into that and allow users a single certificate to always end up in their same segregated section of the network without having to create separate VPN subnets for them.
TLDR: These patches allow OpenVPN to be used in enterprise environments with RADIUS authentication and dynamic VLAN assignments.