How to configure dot1x auth with NAC and AD
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎01-15-2019 04:47 AM
exos switch ip:10.10.1.254
nac ip:10.10.1.201
ad ip:10.10.1.204
exos config:
Netlogin
enable netlogin dot1x mac
configure netlogin authentication protocol-order dot1x mac web-based
enable netlogin ports 3-28 dot1x
enable netlogin ports 3-28 mac
configure netlogin add mac-list ff:ff:ff:ff:ff:ff 48
configure netlogin mac ports 3 timers reauthentication on
aaa
enable netlogin dot1x mac
configure netlogin authentication protocol-order dot1x mac web-based
enable netlogin ports 3-28 dot1x
enable netlogin ports 3-28 mac
configure netlogin add mac-list ff:ff:ff:ff:ff:ff 48
configure netlogin mac ports 3 timers reauthentication on
VLAN config
configure vlan Default add ports 1-28 untagged
configure vlan Default ipaddress 10.10.1.254 255.255.255.0
enable ipforwarding vlan Default
NAC CONFIG:
nac ip:10.10.1.201
ad ip:10.10.1.204
exos config:
Netlogin
enable netlogin dot1x mac
configure netlogin authentication protocol-order dot1x mac web-based
enable netlogin ports 3-28 dot1x
enable netlogin ports 3-28 mac
configure netlogin add mac-list ff:ff:ff:ff:ff:ff 48
configure netlogin mac ports 3 timers reauthentication on
aaa
enable netlogin dot1x mac
configure netlogin authentication protocol-order dot1x mac web-based
enable netlogin ports 3-28 dot1x
enable netlogin ports 3-28 mac
configure netlogin add mac-list ff:ff:ff:ff:ff:ff 48
configure netlogin mac ports 3 timers reauthentication on
VLAN config
configure vlan Default add ports 1-28 untagged
configure vlan Default ipaddress 10.10.1.254 255.255.255.0
enable ipforwarding vlan Default
NAC CONFIG:
7 REPLIES 7
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎06-18-2019 08:41 PM
Hi
Did you manage to do configure dot1x auth with Nac and AD? Is there any documentation available?
I would appreciate your help
Regard
Justine
Did you manage to do configure dot1x auth with Nac and AD? Is there any documentation available?
I would appreciate your help
Regard
Justine
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎02-11-2019 07:59 AM
Please share the error message you see in the end-system table.
Please share the supplicant config on your end system.
Please share the supplicant config on your end system.
Regards
Zdeněk Pala
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎02-08-2019 07:22 AM
do you got guide to do this?
Questions:
1 = do you see radius request coming from the switch to your Access Control Engine?
2 = do you see dot1x in the radius request? or just MACauthentication?
3 = do you see end-system in the end-system table? how it looks like "accept / error"
4 = What is the supplicant (client) setting?
5 = anything in the logs?
1=yes
2=both
3=error
4=enable dot1x login
5=no
Questions:
1 = do you see radius request coming from the switch to your Access Control Engine?
2 = do you see dot1x in the radius request? or just MACauthentication?
3 = do you see end-system in the end-system table? how it looks like "accept / error"
4 = What is the supplicant (client) setting?
5 = anything in the logs?
1=yes
2=both
3=error
4=enable dot1x login
5=no
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎01-19-2019 01:36 PM
Questions:
1 = do you see radius request coming from the switch to your Access Control Engine?
2 = do you see dot1x in the radius request? or just MACauthentication?
3 = do you see end-system in the end-system table? how it looks like "accept / error"
4 = What is the supplicant (client) setting?
5 = anything in the logs?
1 = do you see radius request coming from the switch to your Access Control Engine?
2 = do you see dot1x in the radius request? or just MACauthentication?
3 = do you see end-system in the end-system table? how it looks like "accept / error"
4 = What is the supplicant (client) setting?
5 = anything in the logs?
Regards
Zdeněk Pala
