Mac-based authentication

[Kevin Stanton]

I am trying to set up Mac-based authentication on a procurve 2626, authenticating to a Steel-belted Radius server. However I fail to get authenticated, I have created a user on the radius box with a username on < mymacaddress > multi dash , username mutil dash

Can anyone piont me in the write direction

Thanks

I have the following config on my switch

/sw/code/build/fish(ts_08_5)
May 5 2006 12:22:57
H.08.98
268

Config

exit
radius-server host 172.16.2.14 key secretKey
aaa port-access mac-based 1-4
aaa port-access mac-based addr-format multi-dash
password manager

I have eap method as MD5 chanllenge on the radius box

[Jaguar]

Hi,
Maybe you want to add

aaa authentication port-access eap-radius

I got mine working using IAS.

[Kevin Stanton]

I added aaa authentication port-access eap-radius still no luck, I know I am missing something very simple.

[Kevin Stanton]

I get as far as the Radius box however the radius and the switch log me as a failed authentication.

I have upgraded the code to version 10.31 made no differance.

[Mohieddin Kharnoub]

Hi

I suggest you have a look on the Funk event log screen after any unsuccessful login, and try to trace it.

Good Luck !!!

[Kevin Stanton]

Gave up on Steel belted radius went back to IAS

Added user to the domain Mac-address username and password
Made a member of groups and

Dial in allow access

Account Password settings ; user cannot change password, never expires, store using reversible ( this can take time to replicate, you also need to reset the password if you have just ticked the box as the password is not changed automatically)

IAS

Policy properties : add your windows group I used domain users

Edit profile

Authentication : encrypted authentication (chap)

Advanced :

I added

framed-protocol PPP
service-type framed
tunnel-medium-type 802
You can put you Vlan info in here too

IASparse tool kool for looking at the log files

I am up and running thanks for the help

I found the following Doc very useful
http://www.foundrynet.com/pdf/wp-deploying-mac-with-ias.pdf

switch config

aaa accounting network radius
radius-server host 172.28.9.69 key *****
aaa port-access mac-based 1-4
aaa port-access mac-based addr-format multi-dash