topic Re: solution for network device authentication - ACS? in Network Access Control https://community.cisco.com/t5/network-access-control/solution-for-network-device-authentication-acs/m-p/2184873#M3472 <HTML><HEAD></HEAD><BODY><P>If your users remain connected to the same ports on switches, and don't move to different ports, you could use port security with sticky mac learning to automatically assign appropriate allowed mac addresses to switch ports. If on the other hand you don't know to which port the users will connect, you'll have to use ACS or ISE with MAB to authenticate access.<BR /><BR />Sent from Cisco Technical Support iPad App</P></BODY></HTML> Sat, 09 Mar 2013 23:03:35 GMT stojanr 2013-03-09T23:03:35Z solution for network device authentication - ACS? https://community.cisco.com/t5/network-access-control/solution-for-network-device-authentication-acs/m-p/2184872#M3471 <P>hi everyone -- </P><P></P><P>I'm looking to introduce basic network device authentication into my network of about 650 users. I'm looking for the easiest and least impactful method on the end user.</P><P></P><P>My thought would be to base this on the MAC address and not user authentication. Should this be able to be done through basic port-security on my switches or should I look at ACS?</P><P></P><P>*the main impetus for this is to deny access to any unauthorized wired device on the LAN.</P><P></P><P>Thanks.</P><P></P><P>Brandon</P> Fri, 21 Feb 2020 18:28:07 GMT https://community.cisco.com/t5/network-access-control/solution-for-network-device-authentication-acs/m-p/2184872#M3471 brandonabrown 2020-02-21T18:28:07Z Re: solution for network device authentication - ACS? https://community.cisco.com/t5/network-access-control/solution-for-network-device-authentication-acs/m-p/2184873#M3472 <HTML><HEAD></HEAD><BODY><P>If your users remain connected to the same ports on switches, and don't move to different ports, you could use port security with sticky mac learning to automatically assign appropriate allowed mac addresses to switch ports. If on the other hand you don't know to which port the users will connect, you'll have to use ACS or ISE with MAB to authenticate access.<BR /><BR />Sent from Cisco Technical Support iPad App</P></BODY></HTML> Sat, 09 Mar 2013 23:03:35 GMT https://community.cisco.com/t5/network-access-control/solution-for-network-device-authentication-acs/m-p/2184873#M3472 stojanr 2013-03-09T23:03:35Z