Good question. I guess you can just register it with the REJECT role? Jes
-----Oprindelig meddelelse----- Fra: Jason 'XenoPhage' Frisvold [mailto:[email protected]] Sendt: 29. november 2017 15:30 Til: Jes Kasper Klittum <[email protected]>; [email protected] Emne: Re: SV: [PacketFence-users] USB-C docks and MAB Can you "blacklist" the dock MAC addresses? ie, what happens if someone without that BIOS option set logs in while connected to a dock? Now you have a dock on the network that could be used, inadvertently, and you likely don't know it's there. On 11/28/17 02:15, Jes Kasper Klittum wrote: > Hi Jason, > > I ended up not registering the USB-C dock itself. It turned out that the > Lenovo ThinkPad I was connecting to the dock has a BIOS option to do MAC > passthrough, so the internal MAC address of the laptop is presented to the > dock. This way I can avoid registering the dock itself. > > Jes > > -----Oprindelig meddelelse----- > Fra: Jason 'XenoPhage' Frisvold via PacketFence-users > [mailto:[email protected]] > Sendt: 27. november 2017 23:17 > Til: [email protected] > Cc: Jason 'XenoPhage' Frisvold <[email protected]> > Emne: Re: [PacketFence-users] USB-C docks and MAB > > On 11/24/17 06:13, Jes Kasper Klittum via PacketFence-users wrote: >> Hey guys, >> >> I have a case running with Inverse, but just wanted to check if >> anyone else has gotten around this problem. >> >> We have started using USB-C docks for some of our Lenovo ThinkPads >> and are getting into issues based on the fact that the docks have >> their own ethernet card, and thus their own MAC address. > > This is one of the problems with MAB. I'm not sure there is a workaround > short of clearing the registration rapidly after a device is disconnected. > And it may be very difficult to detect that if the port stays up when the > computer is disconnected. 802.1x would help in this situation, if that's > something you can deploy. > > -- > --------------------------- > Jason 'XenoPhage' Frisvold > [email protected] > --------------------------- > > "A common mistake that people make when trying to design something completely > foolproof is to underestimate the ingenuity of complete fools." > - The Hitchhikers Guide to the Galaxy > -- --------------------------- Jason 'XenoPhage' Frisvold [email protected] --------------------------- “Space,” it says, “is big. Really big. You just won’t believe how vastly, hugely, mindbogglingly big it is. I mean, you may think it’s a long way down the road to the chemist’s, but that’s just peanuts to space.” - The Hitchhikers Guide to the Galaxy ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
