topic Hi, 802.1x can authenticate in Network Access Control

How to do .1x port based network access authentication through ACS

Mukesh Tiwari — Mon, 11 Mar 2019 04:51:22 GMT

How to do .1x port based network access authentication through ACS.

Request you to follow the

Saurav Lodh — Fri, 04 Jul 2014 09:08:58 GMT

Request you to follow the below

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960/software/release/12-2_53_se/configuration/guide/2960scg/sw8021x.html

Thanks Salodh for your quick

Mukesh Tiwari — Fri, 04 Jul 2014 09:25:04 GMT

Thanks Salodh for your quick response

In given link i am getting only switch related part but still Radius side configuration is not clear for me, please give some more light on this related to radius (ACS) configuration.

another config. examplehttp:/

Saurav Lodh — Fri, 04 Jul 2014 10:15:27 GMT

another config. example

http://www.cisco.com/c/en/us/support/docs/lan-switching/8021x/116506-configure-acs-00.html

Thanks Salodh I am still

Mukesh Tiwari — Fri, 04 Jul 2014 14:58:07 GMT

Thanks Salodh

I am still little confused, in ACS i don't find any option to store users mac identity (mac address). In my knowledge .1x authentication means radius server stores all mac address and verify the user with available mac record.

Please correct me if i am wrong.

Hi, 802.1x can authenticate

kushsriva — Thu, 10 Jul 2014 11:11:14 GMT

Hi,

802.1x can authenticate hosts either through the username/password or either via the MAC address of the clients (PC's, Printers etc.). This process is called Agentless Network Access which can be done through Mac Auth Bypass.

In this process the 802.1x switchport would send the MAC address of the connected PC to the radius server for authentication. If the radius server has the MAC address in it's database, the authentication would be successful and the PC would be granted network access.

To check the configuration on the ACS 4.x, you can go to http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.1/configuration/guide/noagent.html

To check the configuration on an ACS 5.x, you can go to http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-2/user/guide/acsuserguide/common_scenarios.html#wp1053005

Regards,

Kush

check the following link for

Venkatesh Attuluri — Mon, 14 Jul 2014 11:31:24 GMT

check the following link for Port-based Authentication with ACS 5.2

http://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/113559-port-based-auth-acs-00.html

Thanks a lot kushsriva and

Mukesh Tiwari — Wed, 16 Jul 2014 21:22:57 GMT

Thanks a lot kushsriva and salodh, i got my answer with your help.