It involves configuration of a MAC address authentication server, MAC address realm, and roles. The MAC address authentication framework is similar to the user access management framework. MAC Address Authentication Framework Configuration Overview Integration with an LDAP server requires the LDAP server to communicate with PPS internal interface.
Interoperability Requirements and Limitations We recommend you use LDAP for large-scale projects. The address table for each local MAC address authentication server is limited to 500 entries. You can add entries manually or by reference to LDAP servers.
The MAC address authentication server is a local authentication server that supports both a local database of records and integration with LDAP servers. MAC Address Authentication Server Feature Support To reduce risk of an exploit, create a special VLAN for each device type. MAC addresses are not generally guarded as secrets, so an attacker can spoof a MAC address and impersonate a device to gain network access. The RADIUS server consults the authentication server and sends back a RADIUS return attribute based on authentication results.īEST PRACTICE: MAC-based authentication is not as secure as agent access or agentless access authentication. With MAC-based authentication, the MAC address serves as both the username and the password. When a device connects to a switch, the switch forwards the MAC address as the log in credential to PPS RADIUS server.
The Pulse Secure MAC address authentication solution uses PPS 802.1x framework. MAC address authentication is port-based security typically deployed at the edge of the network to enable secure access for non-user devices, such as IP phones, printers, and network attached storage devices. This section describes PPS MAC address authentication solution. MAC Address Authentication Server Overview This topic describes how to use the MAC address authentication server. Using the MAC Address Authentication Server
0 kommentar(er)
