MAC Auth Bypass.pdf

Allows clients to integrate with Cisco Identity Based Networking Services (IBNS) and Network Admission Control (NAC) using client MAC address
Applicable in network environments without supplicant code or end client configuration control

Prerequisites for Configuring MAC Authentication Bypass

Understanding of IEEE 802.1x port-based network access control
Knowledge of RADIUS protocol and access control lists (ACLs)
Device must have RADIUS configuration and be connected to Cisco secure access control server (ACS)

Information About MAC Authentication Bypass

Cisco IOS Auth Manager handles network authentication requests and enforces authorization policies
Auth Manager session states: Idle, Running, Authc Success, Authc Failed, Authz Success, Authz Failed, No methods
Configurable MAB Username and Password feature allows interoperability with existing MAC databases and RADIUS servers

Configuring MAC Authentication Bypass

Enable MAB on an 802.1X port using the `mab` command
Enable reauthentication on a port using the `authentication periodic` command
Configure authorization state of the port using the `authentication port-control auto` command

Key Commands

`enable`: Enables privileged EXEC mode
`configure terminal`: Enters global configuration mode
`interface type slot/port`: Enters interface configuration mode
`mab`: Enables MAB
`authentication periodic`: Enables reauthentication
* `show authentication sessions interface type slot/port details`: Displays interface configuration and authenticator instances on the interface