Where are you at in the process of setting up PF in your environment?

The reason I ask is because this will vastly effect exactly what information 
you need at the moment.

>What is needed to be configured in PF?

Nothing special, just add a switch as you would normally according to the PF 
documentation.

>What is needed to be configured on client side? Its a macbook

Nothing, MAB is transparent to the endpoint.

>What is needed to be configured on the cisco 2960?

Cisco has lots of documentation on configuring MAB.  The specifics will be 
different depending on the version of IOS your switch is running.  There is a 
global portion and also a per port portion.  

My global config:
=============
aaa group server radius NAC
 server <PF IP HERE> auth-port 1812 acct-port 1813
!
aaa authentication dot1x default group NAC
aaa authorization network default group NAC 
aaa accounting system default start-stop group NAC
!
radius-server host <PF IP HERE> auth-port 1812 acct-port 1813 key <RADIUS 
SECRET HERE>
radius-server vsa send authentication

My port config:
==============
interface GigabitEthernet1/0/4
 switchport mode access
 switchport voice vlan <your VoIP vlan>
 authentication host-mode multi-domain
 authentication order mab
 authentication port-control auto
 mab
 mls qos trust cos
 spanning-tree portfast
 spanning-tree bpdufilter enable
 spanning-tree bpduguard enable
 spanning-tree guard loop
!

Most of the port config is not MAB specific, just some good practices.  That 
should get you started.

Good luck!  Post back to the list if you run into issues.

Jake Sallee
Godfather of Bandwidth
System Engineer
University of Mary Hardin-Baylor
WWW.UMHB.EDU

900 College St.
Belton, Texas
76513

Fone: 254-295-4658
Phax: 254-295-4221

________________________________________
From: Wifi Guy via PacketFence-users <[email protected]>
Sent: Monday, January 14, 2019 4:08 PM
To: [email protected]
Cc: Wifi Guy
Subject: [PacketFence-users] Cisco 2960 802.1X and MAB

Hi all,

Can someone help with what is required to get wired 802.1X and/or MAB to work 
on wired clients connecting to a cisco 2960 switch?

What is needed to be configured in PF?
What is needed to be configured on client side? Its a macbook
What is needed to be configured on the cisco 2960?

Thanks



_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to