topic SD-Access Fabric disable 802.1X for Wired connection in Network Access Control

SD-Access Fabric disable 802.1X for Wired connection

DuNguyen1212 — Fri, 27 May 2022 04:50:00 GMT

Hi all,

I have SDA Fabric and all config pushed by DNA Center.

I see DNA Center push config relate to AAA (class-map, policy-map, template, assign template to interface)

I want disable 802.1x only wired connection.

Has anyone done this yet?

p/s: i had attach config file push by DNAC

Thank you very much for your interest!

Re: SD-Access Fabric disable 802.1X for Wired connection

Greg Gibbs — Fri, 27 May 2022 05:07:18 GMT

The Authentication Template is defined within the Provision > Fabric Sites > Host Onboarding section. If you do not want NAC (MAB/Dot1x) enabled on the switchports, you would use the 'None' option.

Re: SD-Access Fabric disable 802.1X for Wired connection

DuNguyen1212 — Fri, 27 May 2022 06:33:44 GMT

But 'None' option will impact all fabric site: wired + wireless.

I want disable 802.1x only for wired

Re: SD-Access Fabric disable 802.1X for Wired connection

DuNguyen1212 — Fri, 27 May 2022 06:36:04 GMT

Wired client will use MAB

Wireless client use 802.1x

Re: SD-Access Fabric disable 802.1X for Wired connection

Greg Gibbs — Fri, 27 May 2022 06:47:29 GMT

If that's possible, you will likely need to create a site hierarchy or custom templates of some sort to accomplish it.
This is more of a DNAC question that it is ISE/NAC, so you might be better off posting on the DNA Community.