Windows Server TechCenter >
Windows Server Forums
>
Network Access Protection
>
Printer excemption using 802.1X enforcment
Printer excemption using 802.1X enforcment
- Hi All
I am doing test on 802.1x enforcement. what to know if there is way to wildcard printer and other IP enable devices without OS using the calling station ID feature. as it was disscussed in the following link. http://social.technet.microsoft.com/Forums/en-US/winserverNAP/thread/cd410b9e-b6ff-4303-b6c0-44030a1adfd0?prof=required. I mananged to use MAC authentication with creating username and password using MAC Address in AD and created policy successfuly and put the printer into the vlan by NPS policy. I want to know if there is other way. As we have over 1000 HP printers and it is lots of work to create that many user names
Thanks
Daniel
Answers
- Hi Danpei,
We would like to know more information the authentication methods , to give you a better solution. Are you authenication the MAC addresses as username or you are creating a new user and in the Dial-in properties calling-ID filled with MAC address ?
Thanks
-RamaSubbu SK
Sorry! Microsoft doesn't own any liability & responsibility for any of my posting.- Proposed As Answer byGreg LindsayMSFT, OwnerWednesday, June 24, 2009 8:35 PM
- Marked As Answer byGreg LindsayMSFT, OwnerTuesday, July 07, 2009 4:23 AM
All Replies
Hi,
Maybe you can try to exempt the printers based on hostname, or based on an IP address/range?- Thanks all for the view and reply. I am working with Microsoft People. They told me it works same way as DHCP exception (posted link in my orignial question). but I am unable to get it work. Usint IP address/range. It may not work as it is 802.1x enforcement. Port will be auothorzied to either guest vlan or by MAC by pass feature in the switch. But How to wildcard the printer ?
Daniel - Hi Danpei,
We would like to know more information the authentication methods , to give you a better solution. Are you authenication the MAC addresses as username or you are creating a new user and in the Dial-in properties calling-ID filled with MAC address ?
Thanks
-RamaSubbu SK
Sorry! Microsoft doesn't own any liability & responsibility for any of my posting.- Proposed As Answer byGreg LindsayMSFT, OwnerWednesday, June 24, 2009 8:35 PM
- Marked As Answer byGreg LindsayMSFT, OwnerTuesday, July 07, 2009 4:23 AM
- Thanks RamaSubbu
I am using MAC address as username and password only.
Daniel Does your printer supports 802.1x Authentication or you are doing from Network Switch ?
Sorry! Microsoft doesn't own any liability & responsibility for any of my posting.
