FreeNAC provides Virtual LAN assignment, LAN access control, VLAN management. This tool is a must-have for Network Administrator.
PROS:
– Dynamic VLAN assignment: based on MAC address of the client’s computer, it will be assigned to the associate VLAN. Traditionally network access layer requires network engineers to assign a VLAN to a specific access port that linked to a socket on the wall.
– VLAN access control: prevent unauthorized access to the network even he physically access to the network socket in your company, as his MAC address not associated with any VLAN
– VLAN management: when users change their position or move to another department, Network Administrator only need to change MAC/VLAN mapping to a new VLAN, no need for network engineers to look for the user’s new position, socket on the wall, configure new VLAN to the access switch port.
CONS:
– Network inaccessible for the whole company in case the FreeNAC unreachable, you need to plan HA for the tool.
– Wifi user will access the public internet and use VPN to access internal resources
CONCLUSION :
For a strict network, high-security environment, you can consider implementing this NAC (Network Access Control), it will improve your network security