topic MAC and NAR in Network Access Control

MAC and NAR

eir-dialint — Sun, 10 Mar 2019 21:16:33 GMT

hello All,

is there a way of using Cisco ACS 3.3 on Win2k server to use the CLI part of a NAR to restrict access based upon users MAC address? I have a Cisco Router forwarding on radius requests to the ACS.

Thanks,

Russell.

Re: MAC and NAR

pradeepde — Wed, 24 Aug 2005 19:09:29 GMT

You can use NAR to restrict access based on values other than CLIs, such as an IP address or MAC address; for information, see http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_user_guide_chapter09186a0080102173.html#277

Re: MAC and NAR

eir-dialint — Thu, 25 Aug 2005 09:28:24 GMT

Thanks,

I have seen this documentation already and this is what prompted me to try and implement this. I have tried specifying the clients MAC address in the CLI field in a non IP NAR. However this does not work. I have looked at the radius accounting logs and the MAC address is not being presented in the calling station id radius attribute. So I need to try and clarify how implement what Cisco say the link you gave me. See below

"However, by entering an IP address in place of the CLI you can use the non-IP-based filter even when the AAA client does not use a Cisco IOS release that supports CLI or DNIS. In another exception to entering a CLI, you can enter a MAC address to permit or deny"