Security

Ciao,

Do you know if it's possible to autenticate mac-address using MSSQL when the switch uses EAP-MD5 as protocol?

Thanks

Evaluate the MAC address during the authentication phase. For the authentication phase, do an Allow All MAC Auth.

Not the [EAP MD5] ???

If the switch can only do EAP-MD5, you'll need to do this workaround.

1. Extract and Import the attached static host list.
2. Create a new Static Host List authentication source and select the SHL previously imported
3. Use this as the auth source along with [EAP MD5] as the method
4. Add the SQL auth source as an additional authorization source

Attachment(s)

ClearPass_SHL_EAP-MD5-Allow-All-MAC-Auth.xml.zip   1 KB 1 version

Thanks Tim

However now I've this error regarding authorization. I attach the logs and SQL  cfg

1) Your query for MAC address should be %{Connection:Client-Mac-Address} instead of username

2) Does the query work when you test in the attribute builder?