802.1x and MAC Address Mixed Authentication mode: MAC address is first

Created: Dec 16, 2018 20:41:12Latest reply: Dec 21, 2018 17:29:01 1131 5 10 0
This post was last edited by 4am at 2018-12-16 20:44.

In NAC network deployment, 802.1x authentication and MAC address authentication can be deployed on interfaces of access users to flexibly adapt to various authentication requirements. In this manner, users can access the network in any authentication mode.


After multiple authentication modes are deployed, the device allows users to access the network in different modes by default to grant different network rights to users.


In this example, MAC address authentication is performed. If the authentication fails, 802.1X authentication is performed.


Picture1-1 Two authentication networking modes

202803sn5j8jmvmmnnn2fr.png

The unified mode is used.

Configuration file

#
authentication-profile name p1
dot1x-access-profile d1
mac-access-profile m1
#
domain isp
#
radius-server template rd1
radius-server shared-key cipher %#%#FP@&C(&{$F2HTlPxg^NLS~KqA/\^3Fex;T@Q9A](%#%#
radius-server authentication 192.168.100.100 1812 weight 80
radius-server accounting 192.168.100.100 1813 weight 80
#
dot1x-access-profile name d1
#
mac-access-profile name m1
#
aaa
authentication-scheme abc
  authentication-mode radius
accounting-scheme acco1
  accounting-mode radius
  accounting realtime 15
domain isp
  authentication-scheme abc
  accounting-scheme acco1
  radius-server rd1
#
interface GigabitEthernet1/0/1
 authentication-profile p1
#

  • x
  • convention:

yiyi0519  Visitor   Created Dec 19, 2018 17:01:11 Helpful(0) Helpful(0)

all the device support the mac authentication, how to switch to use the 802.1x?
  • x
  • convention:

Yolanda_617  Enthusiast Technician   Created Dec 21, 2018 09:31:18 Helpful(0) Helpful(0)

how to switch to use the 802.1x?
  • x
  • convention:

YOO  Visitor   Created Dec 21, 2018 11:12:05 Helpful(0) Helpful(0)

Great help for understanding the knowlege
  • x
  • convention:

connieirby     Created Dec 21, 2018 13:59:31 Helpful(0) Helpful(0)

An obligation of appreciation is all together to share this information. I to a great degree like your post specifically. You have amazingly shared a helpful and charming post with people continue sharing attentively look at it Image To PDF
  • x
  • convention:

user_2915719  Visitor   Created Dec 21, 2018 17:29:01 Helpful(0) Helpful(0)

So it's going to use MAC first, if failed then 802.1x?
  • x
  • convention:

Reply

Reply
You need to log in to reply to the post Login | Register

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!
Fast reply Scroll to top