Tuesday, August 12, 2008 10:54 PMDoes anyone know how to do NAP with MacAddresBypass feature of a switch for printers and other non-dot1x clients?
I set the command dot1x mac-address-bypass on the switch, and after it fails eap, I see it send to NPS the mac address as a user. Can I create a list of approved mac addresses?
If not, how do you allow printers to participate on a dot1x network?
Wednesday, August 13, 2008 8:14 AMI'm not sure about my response, but I think that you must put your non-dot1x clients in guest vlan. You don't have any another choice.
Thursday, September 18, 2008 12:22 PMI think you don't want to put your printer in a guest vlan. You can disable dot1x on that specific switchport. I think it's also possible to exclude printers in nap but I haven't found it yet.
- Edited by John_do50 Thursday, September 18, 2008 12:26 PM
Friday, September 19, 2008 12:21 AMOwnerHi Derek,
There is a blog post that might help you with this. It is also discussed in some forum posts. See the links below.
Also, here is a reference describing MAC address authorization with IAS:
I hope this helps,