Wired Intelligent Edge

 View Only
  • 1.  6100 10.07.0010 NAC configuration

    Posted Aug 13, 2021 12:03 PM
    Hello All,

    I'm new to the OS-CX format and looking for configuration examples on how to setup dot1x and MAB NAC on 6100 switches.  Are there any resources other than the configuration guides found on the support portal?  Would anyone have a template they'd like to share?

    Thanks

    ------------------------------
    Tom Butler
    ------------------------------


  • 2.  RE: 6100 10.07.0010 NAC configuration

    Posted Aug 15, 2021 01:47 AM
    you can refer to the Wired Policy Enforcement (Solution Guide) that has a section on CX switches

    https://community.arubanetworks.com/community-home/digestviewer/viewthread?MID=27076#bm4318f5bb-0e1b-45de-8f6e-c3ef8648bd0d

    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba.
    ------------------------------



  • 3.  RE: 6100 10.07.0010 NAC configuration

    Posted Aug 15, 2021 11:31 AM
    Edited by ktakodra Aug 15, 2021 11:31 AM
    Note the 6100 only supports Local User Roles

    Here is a outline configuration with the key parts for basic NAC


    !
    !
    vlan 1,10,99
    !
    radius-server host <yourip> key plaintext <yourpassword>
    !
    !
    port-access role employee
    vlan access 10
    port-access role guest
    vlan access 99
    !
    !
    aaa authentication port-access dot1x authenticator
    enable
    !
    !
    interface 1/1/5
    no shutdown
    vlan access 1
    aaa authentication port-access mac-auth
    enable
    !
    !
    interface 1/1/8
    no shutdown
    vlan access 1
    aaa authentication port-access dot1x authenticator
    enable
    !
    !
    interface 1/1/11
    no shutdown
    vlan access 1
    aaa authentication port-access dot1x authenticator
    enable
    aaa authentication port-access mac-auth
    enable
    !






    ------------------------------
    Kamal Takodra
    If my post was useful accept solution and/or give kudos
    ------------------------------