cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
769
Views
0
Helpful
1
Replies

IP Phone Dot1x - MAC Addresses database for MAB configuration

jorjes1984
Level 1
Level 1

Hi All

I need to configure the MAB for the IP phones on the ports that are dot1x enabled

Can I store the MAC addresses of the IP phones somewhere else then on the ACS's Internal hosts?

can it be done in the AD or something similar...?

Regards,

Georges

1 Accepted Solution

Accepted Solutions

Tiago Antunes
Cisco Employee
Cisco Employee

Hi,

You can use wahtever database your AAA server suports as long as you define the mac addresses as users on those databases.

please remember that the mac address and password are the same and must match the format it receives in the RADIUS access request.

Example: if the AAA client (switch) sends the mac address in the format xxxxxxxxxxxx, then you create the user with this format.

If it sends in the format xxxx.xxxx.xxxx, then you need to create the user in this way.

Usually it sends in the format xxxxxxxxxxxx, but worht to check to make sure.

HTH,

Tiago

--

If  this helps you and/or answers your question please mark the question as  "answered" and/or rate it, so other users can easily find it.

View solution in original post

1 Reply 1

Tiago Antunes
Cisco Employee
Cisco Employee

Hi,

You can use wahtever database your AAA server suports as long as you define the mac addresses as users on those databases.

please remember that the mac address and password are the same and must match the format it receives in the RADIUS access request.

Example: if the AAA client (switch) sends the mac address in the format xxxxxxxxxxxx, then you create the user with this format.

If it sends in the format xxxx.xxxx.xxxx, then you need to create the user in this way.

Usually it sends in the format xxxxxxxxxxxx, but worht to check to make sure.

HTH,

Tiago

--

If  this helps you and/or answers your question please mark the question as  "answered" and/or rate it, so other users can easily find it.