Hi,
I'm currently dealing with the topic of 802.1X and have a question that I would appreciate some help with!
I would like to authenticate a wired client using MAB so that it can access restricted central resources in the first step! If the MAC address cannot be authenticated, access should be blocked!
In terms of approach, I would configure the respective switch port as an access port (untagged) in the restricted VLAN and secure it using ACL on the Layer 3 interface! However, isolation in the same VLAN/IP segment is not guaranteed this way... Does anyone here have a suggestion as to how I could solve this better?
In the second step - when the device has been successfully authenticated using the MAC address - a certificate should be pushed to the client, which should then ultimately trigger authentication using 802.1X!
As soon as the certificate has been validated, the respective VLAN should be changed dynamically by the authentication server on the switch(port)!
Any kind of help/suggestions/informations is very welcomed and I thank you all in advance!
