topic Re: MAC address authentication and iLO2 in Server Management - Remote Server Management

MAC address authentication and iLO2

Mark Aggleton — Thu, 12 Aug 2010 09:13:57 GMT

We have an environment where we are implementing MAC address authentication using Cisc ACS servers. If I patch the iLO to a port configured to allow un-authenticated traffic I have no problem getting on the network, however if we force authentication the card doesn't appear to be sending the MAC address to be authenticated (and therefore never attaches to the network. Any ideas?

Re: MAC address authentication and iLO2

Oscar A. Perez — Thu, 12 Aug 2010 12:12:24 GMT

It could be the ARP replies issue that I've been seeing in iLO.

Is the Cisc ACS server sending ARP requests packets to iLO2 in which the source MAC address of the Ethernet header is different from the source MAC address shown on the ARP request body?

Re: MAC address authentication and iLO2

Mark Aggleton — Thu, 12 Aug 2010 12:35:44 GMT

I've forwarded to our network team for comment and will get back.

Re: MAC address authentication and iLO2

Mark Aggleton — Fri, 13 Aug 2010 06:06:17 GMT

Apparently it's not even getting the MAC address to the ACS server.

Re: MAC address authentication and iLO2

Oscar A. Perez — Mon, 16 Aug 2010 17:32:18 GMT

Is the Cisco ACS using IEEE 802.1X?

iLO TCP/IP stack doesn't support 802.1X.