Dynamic Vlan with 802.1x and mac adress

[Yaël Rozanes]

>Generally what is done is to use just 802.1x authentication alone, and create rules
>based on the Calling-Station-Id attribute which will contain some rendition of
>your MAC address.


I think I understand what you recommend, for now I authenticate my supplicant with an id/mdp couple ( that I get on a Ldap server) in EAP-TTLS but I would have liked to do the same with only the mac address using for example a MySQL database

If I understand correctly, you advise me to use another field of my ldap which would contain my @mac and to link it to the attribute "Calling-Station-Id"?


Thanks for your anwser and excuse me for grammar errors, I'm still learning :D

________________________________
De : Freeradius-Users <freeradius-users-bounces+irozanes387=hotmail.fr at lists.freeradius.org> de la part de Brian Julin <BJulin at clarku.edu>
Envoyé : mardi 20 mars 2018 16:59
À : freeradius-users at lists.freeradius.org
Objet : Re: Dynamic Vlan with 802.1x and mac adress


Yaël Rozanes <irozanes387 at hotmail.fr>:

> Since my searches didn't work, I would have liked to know if it was possible to couple @mac authentication with the 802.1x protocol to assign dynamic vlan with freeradius?

Generally what is done is to use just 802.1x authentication alone, and create rules
based on the Calling-Station-Id attribute which will contain some rendition of
your MAC address.

Some switches allow you to also run MAC authentication, but it is only there to
support clients that cannot do 802.1x and works just the same as without
802.1x (after a delay waiting to see no EAPOL frames.)


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Support & Services<http://www.freeradius.org/list/users.html>
www.freeradius.org
The world's leading RADIUS server. The project includes a GPL AAA server, BSD licensed client and PAM and Apache modules. Full support is available from NetworkRADIUS.



-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html