01-08-2015 12:26 AM - edited 03-10-2019 10:19 PM
Hello Community,
iam using Cisco ACS 5.5. I have a short question,
When i want to authenticat a normal Computer with Mac-Address, do i only have to add the Mac-Adress under identity Stores "Hosts" ?
When i do that, i see on Reporting that the Computer want to Authenticate with CHAP/MD5 and want a Username (Mac-Adress without dahes Like: 0045c35b1ef0)
Message: 22056 Subject not found in the applicable identity store(s).
When i add this username (Mac without dashes) with password on internal Users identity Store the authentication works.
But is is possible that the computer authenticate only with Lookup ? that i only have to add the computer mac-adress to hosts identity store.
How can i confiure that ?
thanks
regards
Solved! Go to Solution.
01-08-2015 02:19 AM
Hi Sebastian,
the MAC must be in "Hosts"
Under Access-Policies/Access Services/Allowed Protocols" you need to select "host lookup".
Horst
01-08-2015 02:19 AM