topic Re: 802.1x Authentication and Port-Security simultaneously in multi-auth mode in Network Access Control https://community.cisco.com/t5/network-access-control/802-1x-authentication-and-port-security-simultaneously-in-multi/m-p/3811184#M484744 In a previous job we had a similar requirement. We manually implement port-security on 8021x host facing ports. However, the requirement we required from end users/different labs was how many hosts will you want on specific ports. From there we would implement port-sec and set the max to whatever the number was that got approved. It definitely created issues from time to time with end users being unaware or missing information, and simply moving hosts to other ports causing them to go err-disabled.<BR /><BR />HTH! Wed, 27 Feb 2019 20:04:36 GMT Mike.Cifelli 2019-02-27T20:04:36Z 802.1x Authentication and Port-Security simultaneously in multi-auth mode https://community.cisco.com/t5/network-access-control/802-1x-authentication-and-port-security-simultaneously-in-multi/m-p/3811157#M484742 <P>We were trying to determine if there is a solution to limit then number of MAC addresses learned on a port if 802.1x is deployed in multi-auth mode. I had previously read not to use 802.1x and port-security.&nbsp; I have also read that is not a supported solution.&nbsp;</P> Fri, 21 Feb 2020 19:03:18 GMT https://community.cisco.com/t5/network-access-control/802-1x-authentication-and-port-security-simultaneously-in-multi/m-p/3811157#M484742 Alex Pfeil 2020-02-21T19:03:18Z Re: 802.1x Authentication and Port-Security simultaneously in multi-auth mode https://community.cisco.com/t5/network-access-control/802-1x-authentication-and-port-security-simultaneously-in-multi/m-p/3811171#M484743 <P>to this date there is no solution to combine the 802.1x with port security. and it still stand not combine the port-security and dot1x on same port. as port-security is at switch level and 1.x is ISE feature.</P> Wed, 27 Feb 2019 19:43:49 GMT https://community.cisco.com/t5/network-access-control/802-1x-authentication-and-port-security-simultaneously-in-multi/m-p/3811171#M484743 Sheraz.Salim 2019-02-27T19:43:49Z Re: 802.1x Authentication and Port-Security simultaneously in multi-auth mode https://community.cisco.com/t5/network-access-control/802-1x-authentication-and-port-security-simultaneously-in-multi/m-p/3811184#M484744 In a previous job we had a similar requirement. We manually implement port-security on 8021x host facing ports. However, the requirement we required from end users/different labs was how many hosts will you want on specific ports. From there we would implement port-sec and set the max to whatever the number was that got approved. It definitely created issues from time to time with end users being unaware or missing information, and simply moving hosts to other ports causing them to go err-disabled.<BR /><BR />HTH! Wed, 27 Feb 2019 20:04:36 GMT https://community.cisco.com/t5/network-access-control/802-1x-authentication-and-port-security-simultaneously-in-multi/m-p/3811184#M484744 Mike.Cifelli 2019-02-27T20:04:36Z Re: 802.1x Authentication and Port-Security simultaneously in multi-auth mode https://community.cisco.com/t5/network-access-control/802-1x-authentication-and-port-security-simultaneously-in-multi/m-p/3811185#M484745 <P>to my knowledge cisco best practice is not to configure 1.x with port-security. unless they change this practice or i gone too old.</P> Wed, 27 Feb 2019 20:06:49 GMT https://community.cisco.com/t5/network-access-control/802-1x-authentication-and-port-security-simultaneously-in-multi/m-p/3811185#M484745 Sheraz.Salim 2019-02-27T20:06:49Z Re: 802.1x Authentication and Port-Security simultaneously in multi-auth mode https://community.cisco.com/t5/network-access-control/802-1x-authentication-and-port-security-simultaneously-in-multi/m-p/3811208#M484746 That's correct. And I've seen some issues with 802.1X and port-security enabled combined with MAB IP-Phones and 1X endpoints behind them where the switchport was err-disabled when a computer was plugged in the phone pass-through port. Wed, 27 Feb 2019 20:27:38 GMT https://community.cisco.com/t5/network-access-control/802-1x-authentication-and-port-security-simultaneously-in-multi/m-p/3811208#M484746 Maxee 2019-02-27T20:27:38Z Re: 802.1x Authentication and Port-Security simultaneously in multi-auth mode https://community.cisco.com/t5/network-access-control/802-1x-authentication-and-port-security-simultaneously-in-multi/m-p/3811351#M484747 <P>I have read that it was not a best practice. I just wanted to make sure.</P> Thu, 28 Feb 2019 00:49:11 GMT https://community.cisco.com/t5/network-access-control/802-1x-authentication-and-port-security-simultaneously-in-multi/m-p/3811351#M484747 Alex Pfeil 2019-02-28T00:49:11Z