08-05-2021 05:45 AM
Hello All
I need to allow a group of mac adresses to access a cisco 2960
is it possible to use 802.1x for that?
Thanks a lot
Solved! Go to Solution.
08-05-2021 06:06 AM
Do you have ISE in Place, MAB authentication is you looking.
08-05-2021 06:06 AM
Do you have ISE in Place, MAB authentication is you looking.
08-12-2021 01:49 AM
Hi
thanks for the answer
I don't have ISE but I've succeeded with MAB and Freeradius
Have a good day !
08-12-2021 03:07 AM
Sure I used FreeRadius many many years, to save cost for many Clients (where people can not buy ISE) - if you know well FreeRadius, manythings can be done, Due to Open Source, support and fix bit slow, that can be managed to cost save if one Looking.
Personally any Radius need to comply RFC, ISE/ACS/ NPS/Freeradius.
Thank you for the feedback.
08-06-2021 12:10 AM
Hello,
If you don't have a Radius Server, you may need MAC Access-list:
mac access-list extended MAC_FILTER
permit host MAC_1 any
permit host MAC_2 any
deny any any
Interface x/x/x
Description Computer
mac access-group MAC_FILTER in
Hope that helps!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide