Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

using EAP with MAC athentication


Are there any known issues with using EAP authetication as well as mac address authetication???

would the access-point autheticate both and only them let the client associate with itself or either.

is it possible to create groups of users in ACS and associate mac-address authentication to them , so that 1 group can not authenticate to another group even if he knows the usersname and password.


New Member

Re: using EAP with MAC athentication

i believe the answer to your first question is as i remember, both authentications are enabled then it will exam mac authentication first if fails, then eap will come in to play. i may have to double check with the most current ios though.

for the second question in regards to group settings, yes you can. it's called Network Access Restriction (NAR). you can creat different user groups and assign different group settings. however the right way to do your requirements is to set two different SSID with each authentication method.

let me know if you need further clarification.

a rating would be appreciated if it helps.

CreatePlease login to create content