vpn group authentication with acs 5.3 and MAC client vpn authentication

[ngo duyen]

I have try "vpn group authentication with acs 5.2" and it work well.

https://supportforums.cisco.com/thread/2081161

Now I want to config addition condition, I want  ACS check MAC address of computer which

initialize connection to vpn server before accept vpn connection.

I use End Station filter with the MAC address but I have failed. When I check "Monitoring and report" in ACS, ACS check public IP of vpn client as MAC address.

Could you check the problem ?

Is there any way to do the requirement ?

thanks

Duyen.

[Tarik Admani]

Hi,

You can not check the mac address of a vpn client because the calling-station-id appears as the ip address of the client and not the mac address. The calling station id is the mac address in dot1x deployments.

Thanks,

Tarik Admani
*Please rate helpful posts*

[ochalmers]

Hi Tarik, i have a situation like this, is there a way to use the mac address as a variable for the authentication of the users.

Regards

Oscar