port security with 802.1x authentication

[jeanfrancoisbarsocchi2818]

Hello All

I need to allow a group of mac adresses to access a cisco 2960

is it possible to use 802.1x for that?

Thanks a lot

[balaji.bandi · Accepted solution]

Do you have ISE in Place, MAB authentication is you looking.

https://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/identity-based-networking-services/config_guide_c17-663759.html

[jeanfrancoisbarsocchi2818]

Hi

thanks for the answer 

I don't have ISE but I've succeeded with MAB and Freeradius

Have a good day !

[balaji.bandi]

Sure I used FreeRadius many many years, to save cost for many Clients (where people can not buy ISE) - if you know well FreeRadius, manythings can be done, Due to Open Source, support and fix bit slow, that can be managed to cost save if one Looking.

Personally any Radius need to comply RFC, ISE/ACS/ NPS/Freeradius.

Thank you for the feedback.

[Amine ZAKARIA]

Hello,

If you don't have a Radius Server, you may need MAC Access-list:

mac access-list extended MAC_FILTER
permit host MAC_1 any

permit host MAC_2 any

deny any any

Interface x/x/x
Description Computer
mac access-group MAC_FILTER in

Hope that helps!