cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
336
Views
0
Helpful
1
Replies

How to secure IoT devices that do not support DHCP?

lnw-team
Level 1
Level 1

Hello,

We've recently deployed new site and we would like to enable dot1x authentcation on all access ports. The point is that we've got some IoT devices (such as attendance systems and access control) that do not support EAP-TLS or PEAP and do not have fully implemented TCP/IP stack. In such case they cannot obtain IP adddress via DHCP. What would be the best authentication method in this case and will it work correctly if we would like to enforce dynamic VLAN assignment via dot1x?

Thank you in advance!

 

1 Reply 1

balaji.bandi
Hall of Fame
Hall of Fame

Then that should go with Statiic IP address and MAB authentication.

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help