Hello fellows,i need to do something strange. Here's my scenario, i have a freeradius with mysql for authentication and vlan assignment with mab, but now i need the endpoints than support EAPoL (windows machines, maybe some printers, etc) to authenticate against dot1x (username and pass) not mab anymore. MySQL database has mac address of all my device but domain controller has all users. So my question is if exist a method that authenticator (switch) can recognize mab or dot1x authentication method and send access request packet to different radius, in case of MAB to freeradius and mysql in case of dot1x to Domain controller with NPS role enabled. If this cannot be done i must figure it out how can freeradius query ldap or AD and mysql simiultaneously.
