Pat Fetty from the WinCAT team posted a new article that talks about the differences between 802.1X NAP deployments when using VLANs or Port ACLs.  If you’re deploying, or thinking about deploying, 802.1X NAP, read this article first!  Actually, start with Joe Davies’ (the Cable Guy from TechNet, now running the NAP blog) excellent NAP book, then read this article.  As Pat mentions, NAP has a lot of moving parts, and those parts have moving parts, so it takes a bit of work to understand some of the intricacies but when you do, you’ll reap many benefits.

You might remember me mentioning VLANs vs. Port ACLs in a previous post, specifically when using static IP addresses.  You shouldn’t be surprised, then, that it was Pat that pointed that solution out to me in the first place.