Security

We have some medical devices to cannot use 802.1x. So I have using a long PSK (AES). I wanted to know about setting up a role that states if the MAC address starts with xx:xx:xx:xx to access the just the servers associated to the servers listed. I made a netdestinaiton with all the servers the devices required. The part I am having an issue with how do I make policy or rule for this. I noticed under Security -> Authentication -> User Rules, you can set MAC starts with. Is this the only way to do this?

Yes, that is exactly what you would do. Once you build the UDR, you 'll want to select the UDR in the AAA profile for your PSK network.

Can I put multiple rules for different medical devices based on the MAC in the same PSK network?

Yes, they just have to be in the same UDR set.