MAB with ACS 4.2 and NAP

cisco · ‎09-24-2009

Hellow

I'm using NAP's and want to use MAB as well. Right now i use the ACS Util to add MAC addresses to the right ACS Groups. But when using NAP's, I need to configure MAB under "Authentication" in the profile. Right there i also have to add all the MAC addresses (Add MAC Addresses into Internal DB). But I already added them by the script. Isn't there a was to bypass this ? Just select a ACS group to check the MAC addresses ?

Regards,

Remco

Jatin Katyal · ‎09-24-2009

Hi Remco,

Please visit the below listed link:

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_

for_windows/4.1/configuration/guide/noagent.html#wp1083264

You'll find a section called "Default Action", the MAC address that are not

found on local database/LDAP, are assigned to the group selected in this

section.

If we do not want all the MAC address to go through MAB, then select a group

for Default Action, and disable it.

HTH

Regards,

JK

~Jatin