MAC address authentication and iLO2

[Mark Aggleton]

We have an environment where we are implementing MAC address authentication using Cisc ACS servers. If I patch the iLO to a port configured to allow un-authenticated traffic I have no problem getting on the network, however if we force authentication the card doesn't appear to be sending the MAC address to be authenticated (and therefore never attaches to the network. Any ideas?

[Oscar A. Perez]

It could be the ARP replies issue that I've been seeing in iLO.

Is the Cisc ACS server sending ARP requests packets to iLO2 in which the source MAC address of the Ethernet header is different from the source MAC address shown on the ARP request body?

[Mark Aggleton]

I've forwarded to our network team for comment and will get back.

[Mark Aggleton]

Apparently it's not even getting the MAC address to the ACS server.

[Oscar A. Perez]

Is the Cisco ACS using IEEE 802.1X?

iLO TCP/IP stack doesn't support 802.1X.