MAC based auth

tnt at kalik.net tnt at kalik.net
Wed Nov 26 14:42:05 CET 2008


>Do they support Mac-Based Auth + 802.1X on the same port?

In a (very) weird way. It's not mac auth + 802.1x but mac auth *in*
802.1x (mac address is sent as user/pass - requires registry hacking on
XP). And then you can re-authenticate with username/pass.

There is also something called mac authentication bypass for 802.1x. If
enabled switch will do mac auth if it doesn't get EAPOL packet from the
supplicant. So, in a matter of speaking, you can have mac auth and
(probably should say or - the idea is to be able to connect something
that doesn't do 802.1x, like a network printer) 802.1x on the same port.

Ivan Kalik
Kalik Informatika ISP




More information about the Freeradius-Users mailing list