Switches, Hubs, and Modems
cancel
Showing results for 
Search instead for 
Did you mean: 

mac based authentication

stieven struyf
Frequent Advisor

mac based authentication

i am testing mac-based authentication but encountered a problem with auth-vid and unauth-vid.

My mac address get authenticated correctly by the radius server.
The "show port-access mac-based" clearly says that the switch also sees this as an authorized client.
The switch however doesn't change the vlan to the one defined by auth-vid.

it's a 2848 with firmware version I8.98 .

3 REPLIES
Mohieddin Kharnoub
Honored Contributor

Re: mac based authentication

Hi

In Auth-VID scenario, the user will be assigned a VLAN in following order of priority:

- VLAN in RADIUS profile.
- auth-vid parameter for the ports.
- Underlying port VLAN assignment.

So if you have a RADIUS vlan attribute, that will take priority, otherwise, you have to check the commands, and few more things, all the Vlans should be tagged on all uplinks, and it should exist (created) on the relevant switches.

Good Luck !!!
Science for Everyone
stieven struyf
Frequent Advisor

Re: mac based authentication

thanks for your answer, i forgot to answer that i got it working with 802.1x and my windows account(as i already setup for our wireless stuff).
no vlan is given from radius, i changed the default vlan to make sure i could see something chaning, but the only change that i see is from the default vlan to the unauth-vid(even when authentication is ok).

i'm now preparing to do a firmware upgrade.
i absolutely want this working, as this can be implemented invisible for the users.
stieven struyf
Frequent Advisor

Re: mac based authentication

some additional info, when i force the vlanid from radius it works fine.
upgrading the firmware didn't help.