topic MAC authentication failed for Wired Users in Network Access Control

MAC authentication failed for Wired Users

acharyr123 — Fri, 21 Feb 2020 18:21:42 GMT

Hi,

I tried to configure MAC authentication for registed users by ACS. But failed. Need help.

Re: MAC authentication failed for Wired Users

jafrazie — Wed, 23 Jul 2008 12:49:29 GMT

If you want to authenticate via the devices MAC address, then you need to disable 802.1X on the PC (which you have enabled for 802.1X with EAP-MD5 as the selected method).

Depends on what you need to achieve,

Hope this helps,

Re: MAC authentication failed for Wired Users

acharyr123 — Wed, 23 Jul 2008 16:20:32 GMT

ok ok..i got ur point....please correct me the config steps:

1. Added switch as aaa client into acs

2. entered machine mac address into acs user-setup as both usename & password.

3. in 64,65 & 81 (in bother group & user setup) choosed 64=vlan; 65=802; 81=authenticated_vlan_id

4. in switch

aaa new-model

aaa authentication dot1x default group radius

radius-server host acs_ip auth-port 1645 acct-port 1646 key ****

dot1x system-auth-control

int fa0/1

switchport mode access

dot1x mac-auth-bypass

dot1x port-control auto

dot1x reauthentication

dot1x pae authenticator

dot1x guest-vlan 900

Note: Whenever i issue the command "port-control auto" the line protocol of the port goes down.

5. in end machine disable ieee 802.1x authentication.

I will try this setting tomorrow & update you accordingly.