Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Static host list and serial number

This thread has been viewed 0 times
  • 1.  Static host list and serial number

    Posted Mar 10, 2019 09:03 AM

    Hello ,

    for PXE boot , for new machines , its a challenge for a normal user to know the mac address without havingOS image . 

    Can we do Static host list on basis of serial number , so if user called IT and give serial number , IT can allow or customize Static host list or any other related attribute , so that the user gets the image ?

     

     



  • 2.  RE: Static host list and serial number

    EMPLOYEE
    Posted Mar 10, 2019 09:36 AM
    No. Static Host Lists are for IPs or MAC addresses.


  • 3.  RE: Static host list and serial number

    Posted Mar 10, 2019 09:58 AM
    Can we use authorization as sccm and query to serial number ? Assuming IT has added serial number in sccm


  • 4.  RE: Static host list and serial number

    EMPLOYEE
    Posted Mar 10, 2019 10:27 AM
    If the MAC address is populated in SCCM, sure.


  • 5.  RE: Static host list and serial number

    Posted Mar 10, 2019 10:58 AM
    I am looking for something other than Mac address as authorization from sccm which user can easily tell the IT guy like serial number , user name etc .and then based on it ,it opens MAB for the user to download the image .

    Basically I am looking for some easy sort of authorization for end user having a new machine .

    We are a large entity and no prior info is available with IT which is centralized at a remote location .


  • 6.  RE: Static host list and serial number

    EMPLOYEE
    Posted Mar 10, 2019 11:01 AM
    The MAC address is the only thing presented to the network during a MAC authorization and is thus required.


  • 7.  RE: Static host list and serial number

    Posted Mar 10, 2019 11:08 AM
    Hi Tim ,

    We have predefined pxe ports and we will allow all mac address for those but we need a precheck before allowing mab


  • 8.  RE: Static host list and serial number

    EMPLOYEE
    Posted Mar 10, 2019 11:15 AM
    You still need the MAC address. It is the only identifier available.


  • 9.  RE: Static host list and serial number

    MVP EXPERT
    Posted Mar 10, 2019 03:13 PM

    An option could be to use the endpoint database with a custom attribute instead of using static hostlists. So you get a single-points of resource. But you still need the mac-adresses of your clients that you want have a "tagged" attribute.

     

    Screen Shot 2019-03-10 at 20.10.17.png