Mac Authenticated Bypass With DNS TXT Records

[IES Sys Admin]

Hi!

Do you have better guidance somewhere for this article: https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Security/TrustSec_1-99/MAB/MAB_Dep_Guide.html#wp392453

Where it says

“Another option that avoids the password complexity requirements is to load your MAC addresses as text (TXT) records in a Domain Name System (DNS) zone that is stored inside Active Directory.”

Do you have instructions on how to setup the TXT records or the NPS ?

[Flavio Miranda]

@IES Sys Admin 

 Did you mean DNS? NPS is for a different purpose. If you are talking about DNS, which DNS service do you use?

[IES Sys Admin]

@Flavio Miranda we are using Microsoft DNS as part of our Active Directory environment in server 2022. How do I format the TXT records? And I am putting them in the Forward Look up Zone? And once I have that, how do I link them to the NPS? NPS has access to Active directory as the server is part of the IAS server group.

[Flavio Miranda]

@IES Sys Admin 

 My konwledge around Microsoft products is very basic, probably this question would be more suitable in a Microsoft forum or maybe someone around here with more knowledge in Microsoft products will jump in and help you.