topic Re: Is it possible to configure mac authentication bypass between an Identifi controller (C4110) and a NAC? in ExtremeWireless (Identifi)

Is it possible to configure mac authentication bypass between an Identifi controller (C4110) and a NAC?

jflores — Mon, 29 Jun 2020 23:12:49 GMT

I already made a configuration enabling mac auth in the test WLAN Services, and the users I can already see in the NAC endsystems, the problem is that I cannot get the devices to show me device type information, hostname, etc, etc.

Does anyone know if I need to do something?

I will greatly appreciate your help.

Re: Is it possible to configure mac authentication bypass between an Identifi controller (C4110) and a NAC?

jflores — Tue, 30 Jun 2020 02:07:37 GMT

I have a C4110 controller and a NAC Appliance, I want to display the end systems and also the type of device, device family, hostname, without the need for user interaction.

Already set up a WLAN, enable MAC-based authentication by setting the NAC as Radius server.
In the NAC I already see the end systems but the device type, device family, hostname is still not shown.

Does anyone have any idea how to do it?

Re: Is it possible to configure mac authentication bypass between an Identifi controller (C4110) and a NAC?

CWurm — Tue, 30 Jun 2020 02:59:40 GMT

Hi Jesus,

the NAC uses DHCP fingerprinting to retrieve this information. The easiest way to do this is by setting an additional IP helper address (or bootprelay on XOS) that points to your NAC.

If you do this, all DHCP requests from your WiFi clients will also be sent to your NAC engine which can learn hostname, operating system etc. from these requests.

Kind regards

Christian

Re: Is it possible to configure mac authentication bypass between an Identifi controller (C4110) and a NAC?

jflores — Tue, 30 Jun 2020 05:11:52 GMT

Thank you very much Christian, I already applied it but it only showed me the hostname, the rest of the information is still blank.

Regards.