topic RE: iDentiFi 802.1x using NAC. deny all devices that are non-domain in ExtremeWireless (Identifi)

iDentiFi 802.1x using NAC. deny all devices that are non-domain

Marlon — Thu, 16 Jun 2016 10:39:00 GMT

how to configure 802.1x in NAC to deny all devices that are not member of the domain?

RE: iDentiFi 802.1x using NAC. deny all devices that are non-domain

Jeremy_Gibbs — Thu, 16 Jun 2016 11:12:00 GMT

Just setup your NAC rule to do it. If the computer isn't in AD, let it fall through to a reject policy. Look at the documentation for filtering on computer name in domain. It's fairly easy.

RE: iDentiFi 802.1x using NAC. deny all devices that are non-domain

Ronald_Dvorak — Thu, 16 Jun 2016 12:06:00 GMT

Here a example if you want to create a explicit rule for NOT in AD group X.

A user with..
- authentication 802.1X PEAP
- NOT in AD group Team (checkmark invert on the right)
- end system group WLAN_Team
- Location Zone Home & SSID Secure Access
will get a Deny Access Rule

So you set the "invert" to reverse the rule = NOT in this AD group

RE: iDentiFi 802.1x using NAC. deny all devices that are non-domain

Marlon — Tue, 28 Jun 2016 20:20:00 GMT

Thanks Ronald!