Controllerless Networks

last person joined: yesterday 

Instant Mode - the controllerless Wi-Fi solution that's easy to set up, is loaded with security and smarts, and won't break your budget
Back to discussions
Expand all | Collapse all

Who authenticate the MAC addresses, if I use external RADIUS for 802.1x?

This thread has been viewed 2 times

  • 1.  Who authenticate the MAC addresses, if I use external RADIUS for 802.1x?

    Posted Nov 08, 2016 08:41 AM

    I find there is a possibility to configure WPA2-Ent with external RADIUS by MAC and 802.1x authentication at the same time, but who does the MAC authentication, the external RADIUS server or the IAP?
    I asked this because if I define a WPA2-PSK, and I checked the MAC authentication option, then new menu items show up, and I can define an Internal Server, and I can configure MAC addresses on this server. But if I use external radius for 802.1x, and I checked the MAC authentication checkbox, no new menu items show up.

     

    Should I configure the filtered MAC addresses on the RADIUS server, am I rigth?


    Thanks!



  • 2.  RE: Who authenticate the MAC addresses, if I use external RADIUS for 802.1x?

    EMPLOYEE
    Posted Nov 08, 2016 08:52 AM

    You would use a policy engine like ClearPass to use MAC address during the authorization phase.



  • 3.  RE: Who authenticate the MAC addresses, if I use external RADIUS for 802.1x?
    Best Answer

    EMPLOYEE
    Posted Nov 08, 2016 09:14 AM
    @SkiP wrote:

    I find there is a possibility to configure WPA2-Ent with external RADIUS by MAC and 802.1x authentication at the same time, but who does the MAC authentication, the external RADIUS server or the IAP?
    I asked this because if I define a WPA2-PSK, and I checked the MAC authentication option, then new menu items show up, and I can define an Internal Server, and I can configure MAC addresses on this server. But if I use external radius for 802.1x, and I checked the MAC authentication checkbox, no new menu items show up.

     

    Should I configure the filtered MAC addresses on the RADIUS server, am I rigth?


    Thanks!

    If you use an external server for WPA2-Enterprise (radius), you also MUST use the same external server for mac authentication.  If you use PSK encryption, you can use the internal server.



  • 4.  RE: Who authenticate the MAC addresses, if I use external RADIUS for 802.1x?

    Posted Nov 08, 2016 09:20 AM

    Now it's clear for me, thanks!