topic Troubleshooting guide in Network Access Control

MAB Configuration issue

Imran Ahmad — Mon, 11 Mar 2019 02:42:07 GMT

with acs 4.2 installed in my network, PEAP, EAP-TLS, md5... authentications work normally. But Mac-Based-Authentication doesnt work at all. i tested every thing but no luck .

This is what i have setup on Swith for MAB:

aaa new-model

aaa authentication login default none

aaa authentication dot1x default group radius

radius-server host 192.168.2.16 auth-port 1645 acct-port 1646 key cisco

dot1x system-auth-control

interface FastEthernet0/1

switchport mode access

dot1x pae authenticator

dot1x port-control auto

dot1x mac-auth-bypass

On ACS server, i created Netword-Profile for MAB, i added those Agentless hosts mac-adds, Even i created User-Name&password by those Agentless hosts mac-adds on acs, ..... still nothing seems to be working. i have selected ACS_Internal-Database for mac authentication.

On ACS while i check the Failed-attempt log, nothing is logged there. i dont know where is the issue.

Please tell me where im wrong on my config?

Troubleshooting guide

Saurav Lodh — Fri, 23 May 2014 11:06:46 GMT

Troubleshooting guide here

http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4-2/trouble/guide/ACSTrbG42/Ch2.html

check the following guides

kaaftab — Fri, 23 May 2014 11:39:03 GMT

check the following guides for references

http://www.cisco.com/c/en/us/support/docs/security/secure-access-control-server-windows/99449-acsfolder-error.html

http://www.techsuite.net/bonnet3/wireless/cisco_eap_deployment_guide.pdf

http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4-2/trouble/guide/ACSTrbG42/ecodes.html

You need to enter "mab" under

nspasov — Fri, 23 May 2014 19:21:22 GMT

You need to enter "mab" under the interface configuration. That will allow mab based authentications on the interface. Please note that the 802.1x timer and re-tries would have to time out before mab occurs. If you are still having problems please past the output of this command:

show authentication session interface interface_name_address

For more info on MAB you can take a look at the following guide:

http://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/identity-based-networking-services/config_guide_c17-663759.html

Thank you for rating helpful posts!