03-04-200907:11 AM - last edited on 03-25-201905:25 PM by ciscomoderator
Hi
I'm looking for a solution for a 802.1X with PXE boot problem. When computer boots, there is no authentication material to authenticate by RADIUS. So switch keeps the port in "unauthenticated" or "guest" VLAN. I do not want to put the RIS / Imaging server in these VLAN's. Is there a solution for this problem ?
We've had folks find success with this by using MAC-Auth-Bypass. Essentially, since PXE initially boots as a "non-1X" device, MAB can be a way to authenticate the machine with the MAC in the absence of 1X itself.
What will happen when machine shows the Windows Login screen ? It still wants to authenticate with the mac address instead of the computer / user certificate I assume..
So I assume the image you load via PXE wil either be enabled for 1X already, or not. If enabled, it can 1X just fine. If not, you can continue to use MAB.
Getting Started
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:
