Unsolved
This post is more than 5 years old
3 Posts
0
2945
June 6th, 2018 11:00
"dot1x mac-auth-bypass" option is missing (6.5.1.3 & 6.5.1.5
I've realized that there is no "dot1x mac-auth-bypass" option in the interface configuration in current Dell N2048 switches firmware (both 6.5.1.3 and 6.5.1.5). I've used this feature in 6.3.0.18 version to use mac based dynamic vlan assignment. Can somebody tell me what is the current equivalent of this command ?
interface Gi1/0/12
switchport mode general
dot1x port-control mac-based
dot1x reauthentication
dot1x mac-auth-bypass
authentication order mab
Now I can't authenticate the client (NIC) on radius server and therefore switch cannot assign the right vlan to the port.
thx for any help
Markus
No Events found!
Helmut66
3 Posts
0
June 6th, 2018 13:00
could you give me some details , syntax or whatever.
Another problem is, that I don't even see any logs in freeradius logs ; so it looks like the switch doesn't even send requests to radius server.
thx
Helmut66
3 Posts
1
June 6th, 2018 14:00
Daniel, thanks a lot ; it's working now!!! There is also one more change made - maybe it can help someone in the future. Previously the mac address was sent by the switch without any spearators (as one string like: A4BADBFB6BC75) , now the switch is sending it like: A4:BA:DB:FB:6B:C5 (colon separated) ; so I had to change my config as well.
thx Markus
RenC
1 Message
1
July 10th, 2018 20:00
Just an FYI for those who use NPS.
The default for the MAC username being passed is XX:XX:XX:XX:XX:XX (colons added in)
You can change this in CLI with a command that was introduced in 6.5
mab request format
I changed my grouping size to 12 (you need to add a separator to complete the command, but it doesn't matter as it is only 12 characters)
Now my MAB clients can authenticate again.