topic Second Radius server for dot1x mab authentication in Network Access Control

Second Radius server for dot1x mab authentication

abdy — Tue, 29 Jan 2019 07:42:49 GMT

Hi All,

Is it possible to have second radius server configured on the switch for mab only?

We configured dot1x authentication from radius server on Win Server 2016.

And we want separate radius server for mab only on ACS 5.6.

Is it possible?

Thanks in advance.

Re: Second Radius server for dot1x mab authentication

Seb Rupik — Tue, 29 Jan 2019 07:50:44 GMT

Hi there,

In all my dot1x implementations I have only been able to use the default dotx1 group for authentication. Therefore this group is used for the entire authentication process on the switchport.

From your description why don't you use ACS as the main authentication server with the windows server used an identity store?

Cheers,

Seb.

Re: Second Radius server for dot1x mab authentication

abdy — Tue, 29 Jan 2019 08:24:26 GMT

Thanks Seb!