Apologies my networking skills are a tad rusty. I'm looking for a way to setup a system that gives me the ability to setup Role-based access to specific network resources. For example, i have three private subnets for specific groups, users will need access to one one or more subnets.
I'd like to have all client machines on the same subnet/vlan, and then use 802.1x to authorize the system, then use that authentication conversation to determine which routing group(s) to put them in.I've searched and found quite a bit on getting ACL's to hand out the appropriate VLAN, however, nothing on even if its possible to get that authentication tied in with routing.
We have many users that wear cross-departmental hats, and would be nice if we could give access to only those necessary. I.e. User X does most of their work in Department Y, but has resources in Department Z that are useful for User X's job, but nobody else in Department Y should be accessing.
I see many offerings from Cisco & packetfence can help decide what VLAN a user goes into, but i need to make sure i can get users access to other subnets.