Aruba Instant & Cloud Wi-Fi

Reply
Occasional Contributor II
Posts: 13
Registered: ‎04-19-2016

Who authenticate the MAC addresses, if I use external RADIUS for 802.1x?

[ Edited ]

I find there is a possibility to configure WPA2-Ent with external RADIUS by MAC and 802.1x authentication at the same time, but who does the MAC authentication, the external RADIUS server or the IAP?
I asked this because if I define a WPA2-PSK, and I checked the MAC authentication option, then new menu items show up, and I can define an Internal Server, and I can configure MAC addresses on this server. But if I use external radius for 802.1x, and I checked the MAC authentication checkbox, no new menu items show up.

 

Should I configure the filtered MAC addresses on the RADIUS server, am I rigth?


Thanks!

Guru Elite
Posts: 7,870
Registered: ‎09-08-2010

Re: Who authenticate the MAC addresses, if I use external RADIUS for 802.1x?

You would use a policy engine like ClearPass to use MAC address during the authorization phase.


Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Guru Elite
Posts: 20,018
Registered: ‎03-29-2007

Re: Who authenticate the MAC addresses, if I use external RADIUS for 802.1x?


SkiP wrote:

I find there is a possibility to configure WPA2-Ent with external RADIUS by MAC and 802.1x authentication at the same time, but who does the MAC authentication, the external RADIUS server or the IAP?
I asked this because if I define a WPA2-PSK, and I checked the MAC authentication option, then new menu items show up, and I can define an Internal Server, and I can configure MAC addresses on this server. But if I use external radius for 802.1x, and I checked the MAC authentication checkbox, no new menu items show up.

 

Should I configure the filtered MAC addresses on the RADIUS server, am I rigth?


Thanks!


If you use an external server for WPA2-Enterprise (radius), you also MUST use the same external server for mac authentication.  If you use PSK encryption, you can use the internal server.

Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Validated Reference Design Guides : http://community.arubanetworks.com/t5/Validated-Reference-Design/tkb-p/Aruba-VRDs
Occasional Contributor II
Posts: 13
Registered: ‎04-19-2016

Re: Who authenticate the MAC addresses, if I use external RADIUS for 802.1x?

Now it's clear for me, thanks!

Search Airheads
Showing results for 
Search instead for 
Did you mean: