Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

how to configure dot1x to check for mac address then to send to radius

hi,

is there any way on a switch to get a port to check a list of mac addresses then if the pc is not in that list send the request to a radius server. the radius we use is steelbelt radius.

cheers

tony

1 REPLY
Cisco Employee

Re: how to configure dot1x to check for mac address then to send

Hi,

It looks you are looking for the mac authentication bypass (MAB) feature.

Please take a look at the feature in detail:

http://www.cisco.com/en/US/partner/docs/switches/lan/catalyst3750/software/release/12.2_52_se/configuration/guide/sw8021x.html#wp1205506.

You can authenticate devices based on MAC address.

Here is a step guide to configure it on older IOS releases:

http://preview.cisco.com/en/US/docs/solutions/Enterprise/Campus/IBD/MACAuthB.html.

12.2(50) and later IOS:

http://www.cisco.com/en/US/partner/docs/switches/lan/catalyst3750/software/release/12.2_52_se/configuration/guide/sw8021x.html#wp1196845.

HTH,

Tiago

--

If  this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.

228
Views
0
Helpful
1
Replies
CreatePlease to create content