MAC based auth

Arran Cudbard-Bell A.Cudbard-Bell at sussex.ac.uk
Wed Nov 26 14:01:58 CET 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Phil Mayers wrote:
> Arran Cudbard-Bell wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> tnt at kalik.net wrote:
>>>> now imho cisco switches don't support mac based authentication with
>>>> freeRadius.
>>>>
>>> They most certainly do. And when you study for your CCNA you will learn
>>> how.
>>>
>>
>> Do they support Mac-Based Auth + 802.1X on the same port? As far as I
> 
> Yes

As in the port can dynamically transition between the two? I thought
there was a caveat that Mac-Based auth would only work if the supplicant
didn't respond to the Identity-Request or send an EAP-Start packet? and
that if EAP based authentication failed the port would remain blocked?

> 
>> was aware HP ProCurve were the only ones that supported this properly
> 
> No. Extreme X250/X450 and 3Com 4400.

Ok i'll check them out.

Thanks,
Arran

- --
Arran Cudbard-Bell (A.Cudbard-Bell at sussex.ac.uk),
Authentication, Authorisation and Accounting Officer,
Infrastructure Services (IT Services),
E1-1-08, Engineering 1, University Of Sussex, Brighton, BN1 9QT
DDI+FAX: +44 1273 873900 | INT: 3900
GPG: 86FF A285 1AA1 EE40 D228 7C2E 71A9 25BB 1E68 54A2
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkktSMYACgkQcaklux5oVKJIuQCeLhwXhCGyy/ZVLqD1HBUyTrbs
gTIAnjxKCRQocIRmZhatPuFC5dGBFnRl
=kDKy
-----END PGP SIGNATURE-----



More information about the Freeradius-Users mailing list