topic Re: Wired dot1x for apple devices in Network Access Control

Wired dot1x for apple devices

ffadhilpi — Thu, 31 Aug 2017 03:01:43 GMT

Hi Forum,

I'm trying to help a customer with locking the wired ports to only company asset macbooks. For wireless JAMF is taking care of that for me by checking mdm>>deviceRegisteredStatus=registered but for wired, JAMF does not have the mac address of the dongle (that changes every time you get new dongle).

Authentication with a cert is not an option here. What's another way to identify corp assets on the wired for Macs??

Re: Wired dot1x for apple devices

Craig Hyps — Thu, 31 Aug 2017 17:26:04 GMT

See Trusted Device + Trusted User section of the following Cisco Live session (BRKSEC-3697 - 2017 Melbourne).

Advanced ISE Services, Tips and Tricks (2017 Melbourne)

The reference version of presentation provided additional details.

Access to CiscoLive.com requires one-time registration (no charge).

/Craig

Re: Wired dot1x for apple devices

paul — Fri, 01 Sep 2017 03:52:37 GMT

If you are using JAMF then join the Macs to AD and then have JAMF configure the MACs to present AD computer credentials just like you do on a Windows device. No need to even to JAMF MDM integration.