Security

Hi Team,

 

I am a running a clear pass with AD Auth service and MAC auth Serivce.Dot1x AD auth is working fine.But Mac Auth is not working.While seeing in access tracker the mac request getting rejected in Dot1x AD service.Kindly provide your suggestions.

 

The issue is Mac auth request is landing in dot1x AD auth services-Hiow to fix it

In the service rules for mac, do you have a line called:

 

Connection  | Client-Mac-Address | EQUALS | %{Radius:IETF:User-Name}

 

This should prevent dot1x clients to hit the mac-auth rule, you can then place the mac rule above dot1x.

 

Or you can create a more specific condition in the dot1x service to exclude mac connections.

In addition to the suggestion made by Klaring , you may also need to re-arrange the services so that the mac auth service is hit prior to the 802.1X service

Sent from Mail for Windows 10

Hi ,

 

I have rearranged the services,Still its mac auth is getting failed in Dot1x Services.Attached screenshot for your kind reference.

I see you build a mac rule for wireless, see line 2.

 

Please change that to wired, or remove wireless