cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
616
Views
0
Helpful
1
Replies
Tony MALPASS
Beginner

how to configure dot1x to check for mac address then to send to radius

hi,

is there any way on a switch to get a port to check a list of mac addresses then if the pc is not in that list send the request to a radius server. the radius we use is steelbelt radius.

cheers

tony

1 REPLY 1
Tiago Antunes
Cisco Employee

Hi,

It looks you are looking for the mac authentication bypass (MAB) feature.

Please take a look at the feature in detail:

http://www.cisco.com/en/US/partner/docs/switches/lan/catalyst3750/software/release/12.2_52_se/configuration/guide/sw8021x.html#wp1205506.

You can authenticate devices based on MAC address.

Here is a step guide to configure it on older IOS releases:

http://preview.cisco.com/en/US/docs/solutions/Enterprise/Campus/IBD/MACAuthB.html.

12.2(50) and later IOS:

http://www.cisco.com/en/US/partner/docs/switches/lan/catalyst3750/software/release/12.2_52_se/configuration/guide/sw8021x.html#wp1196845.

HTH,

Tiago

--

If  this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.