topic Re: MAC based authentication for WIRED users in Network Access Control

MAC based authentication for WIRED users

acharyr123 — Fri, 21 Feb 2020 18:21:39 GMT

Hi,

I want to achieve mac based authentication for wired users so that any non-registered mac address can be moved to a different zone from where only http access will be provided, rest all access will be blocked. Once his MAC address is entered into the database, he will be able to access the resources.

I do have 2960 switches, 4500 switches & ACS.

Is this achieveable?? If so please guide me with config script

Re: MAC based authentication for WIRED users

jafrazie — Thu, 17 Jul 2008 13:27:20 GMT

Yes, see here:

http://www.cisco.com/en/US/docs/switches/lan/catalyst4500/12.2/31sg/configuration/guide/dot1x.html#wp1202931

Re: MAC based authentication for WIRED users

acharyr123 — Mon, 21 Jul 2008 07:49:00 GMT

Hi,

Can Cisco 2960/2950/3560 switch become 802.1x supplicant??

I am unable to configure mac-auth-bypass on 2960/2950/3560 switch. But in 4507R it is happening. Does it mean this option is available only with 4500!!

Re: MAC based authentication for WIRED users

acomiskey — Mon, 21 Jul 2008 11:49:58 GMT

2960 and 3560 support it. Check your IOS, you may need a newer version to support it.

It is not supported on 2950.

Re: MAC based authentication for WIRED users

acharyr123 — Wed, 23 Jul 2008 02:22:58 GMT

Hi,

I have attached the config detail for the same. I am unable to get end users authenticated. Please help me out in this.

Re: MAC based authentication for WIRED users

acomiskey — Wed, 23 Jul 2008 14:53:21 GMT

I don't think you need those authentication settings on the client machine, as mac auth bypass is really for devices which do not support 802.1x. Make sure you added username/password as the mac address, all lower case.