Hi

I need to deploy 802.1x authentication in my network.

I want to use Microsoft Network Policy Server integrated with Active Directory.

For computers and Acive Directory user everything work fine, port are authenticated using username and password of domain user.

Problem exist with devices like printers or other which don't support 802.1x

each device has created domain user with username and password set as MAC in format 0017C825A2E4

on port I set

mab auth-type pap
authentication order dot1x mab

unfortunately port didn't authenticate

 

Timestamp             Interface  MAC-Address        Auth Status   Method
--------------------  ---------  -----------------  ------------  ------
May 28 2020 20:08:08  Gi2/0/29   00:17:C8:25:A2:E4  Unauthorized  MAB
May 28 2020 20:08:08  Gi2/0/29   00:17:C8:25:A2:E4  Unauthorized  802.1X

 

on Windows  NPS event log i see that MAC address is send in format 00:17:C8:25:A2:E4 and this user didn't exist in my domain.

 

05/28/2020 20:08:08.920 DC1WSA21 IAS 311 1 192.168.30.21 05/28/2020 15:44:01 70 1 WSA\00:17:C8:25:A2:E4 WSA\00:17:C8:25:A2:E4 1 Uwierzytelnienie sieci ETHERNET MDF2 192.168.33.10 0 3 16

 

is it possible to change MAC format sent do RADIUS

I test commands

attribute 30 mac format unformatted lowercase

attribute 31 mac format unformatted lowercase

attribute 32 mac format unformatted lowercase

but they didn't impact on it

 

Any idea ?

Regards

Mirek