NAC end-system MAC Mask

  • 0
  • 2
  • Question
  • Updated 1 year ago
  • Answered
Hi,

Currently running version 8.0.2.42, and am in the process of writing a MAC Mask in NAC / Control.

What I'm not sure is if I have entered it correctly, and can't seem to find any working examples.

Here is what I have entered:



Problem with this is when I hit update it will just permanently sit there 'Loading' until I cancel it:



I can go back into it again but the MAC address part is missing, so perhaps I'm doing something wrong?



If anyone has example might be good?

Many thanks.
Photo of Martin Flammia

Martin Flammia

  • 6,326 Points 5k badge 2x thumb

Posted 1 year ago

  • 0
  • 2
Photo of Martin Flammia

Martin Flammia

  • 6,326 Points 5k badge 2x thumb
Wasn't too far off in the end, the answer is:

Photo of Ronald Dvorak

Ronald Dvorak, Embassador

  • 51,328 Points 50k badge 2x thumb
Wouldn't work for my APs as you'd see on my AP MAC list - I've some older models and even the Extreme APs are not from the same production patch.

Might be better to use only the vendor OUI = D4:84:66:00:00:00 FF:FF:FF:00:00:00 instead of also using the 4th byte.

-Ron

Photo of Martin Flammia

Martin Flammia

  • 6,326 Points 5k badge 2x thumb
Thanks Ron.
Photo of Erik Auerswald

Erik Auerswald, Embassador

  • 13,792 Points 10k badge 2x thumb
Hi Martin,

I would have expected that all six bytes of the MAC need to be specified, similar to IPv4 networks, as you found out.

It would be nice for EMC / EAC to issue an error message if the input is obviously incorrect (e.g. missing bytes).

Thanks,
Erik
Photo of Martin Flammia

Martin Flammia

  • 6,326 Points 5k badge 2x thumb
Thanks Erik