MAC based RA VPN

[Dipak Masurkar]

Hello Everyone,

Can anyone help me with mac based RA VPN access process in FTD which is managed by FMC.

[Karsten Iwen]

For sure! Many members of this community can likely help you. What is your problem?

[Dipak Masurkar]

Hello Karsten,

My requirement is like i want to allow RA VPN to only whitelisted MAC address of source device whether it is laptop or desktop.

[MHM Cisco World]

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/device-config/710/management-center-device-config-71/identity-overview.html

MHM

[Karsten Iwen]

I would expect that you can achieve this with Dynamic Access Policies:

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/cluster/ftd_dap_usecases.html

But I think that a solution that works on certificates could be more beneficial to solve this problem. 

[Dipak Masurkar]

Hello MHM,

Thanks for guide.

But it is showing there is no mac based authentication on RA VPN.

[Ruben Cocheno]

@Dipak Masurkar 

It's possible to use Mac-address based authentication if you use AAA with a Radius system either Cisco ISE, or any other vendor (Windows NPS).

[Dipak Masurkar]

Hello Ruben,

Thanks for reply, I got it now we will try with either AAA or NPS.

Thanks you