ACS 5.1 - Specific RADIUS attributes for IP Phones

[jorjes1984]

Hi All

I am doing MAB (MAC authentication bypass) for IP phones and printers.

But these devices are authenticated with different identity stores (IP phones with AD, printer local host on ACS)

Is there any specific AV Radius attributes that i can use in the compound conditions selections which is specific for the IP Phones?

so when doing the Authentication, i could seperate each type (IP phones or Printers) with the appropriate database.

Regards,

Georges

[Erick Delgado]

Hello,

I am not aware of any attribute that can make the difference but I suggest you to look the authentication details of both devices, compare then and if you find something that will be different like IP range, MAC address or anything like that you can do it.

Personally I will do it with the 6 first characters of the MAC address. I am pretty sure that the phones will have that on common and the printers will have a different set of MAC address.

Hope this helps

Erick Delgado

Cisco CSE