Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Wired MAC Authentication

This thread has been viewed 5 times

  • 1.  Wired MAC Authentication

    Posted Jan 23, 2012 11:46 AM

    I am currently running a group of RAP2s with the ETH1 port disabled for security.  I would like to hook up a network printer to the ETH1 port on the RAP.  I want to secure it and was hoping there is a way to authenticate the printer via its MAC address.  Can this be done?

     

    Thanks in advance for the help.

    Sean



  • 2.  RE: Wired MAC Authentication
    Best Answer

    EMPLOYEE
    Posted Jan 23, 2012 01:45 PM

    Personally, I would go the route of a user-derivation rule to throw the printer into a role called "printer". Then I would lock down that role (assuming you have PEF) to only allow the ports necessary for printing (just incase someone tries to get crafty and clone the mac address).

     

    You can find info about how to create the user rule on page 707 of the 6.1 Users Guide.



  • 3.  RE: Wired MAC Authentication

    Posted Jan 23, 2012 02:21 PM

    Thanks for the reply!  Unfortunately I do not have PEF. 

    I am not worried about someone cloning the mac as its for a 2 hour meeting.  I just need something so our clients can have email and printing access.

     

    Thanks!



  • 4.  RE: Wired MAC Authentication

    Posted Jan 23, 2012 03:00 PM

    My mistake guys.  I ended up using the user role to accomplish this and it works great! 

     

    THANKS FOR THE HELP!

    Sean