Setup MAC Authentication
3 min
overview mac authentication is used for endpoints such as printers, phones, sensors, cameras, and other wired devices connected to the nile access switches that do not support 802 1x authentication in this case, the mac address of the endpoint is used to authenticate the nile access service supports integrating mac authentication with external radius servers, such as cisco ise or aruba clearpass this allows organizations to leverage their existing radius infrastructure for mac based authentication, while still benefiting from the nile access service's centralized management and policy enforcement learn more about radius powered authentication docid\ dpzqed6jqfqucdkx3lpob when using radius based mac authentication, the nile access service supports dynamic segment assignment based on the attributes returned by the radius server this allows a single ssid to be mapped to multiple segments, with the segment determined by the user or device's identity configuring mac authentication login to the nile portal and click on the network setup button from the left side navigation pane click on access management there are four different ways to configure mac authentication on the nile portal if you already have any wired devices connected to the nile access switches, they will show up on the mac authentication page you can then select those devices and approve, deny, or delete them as needed you can input the oui (organizational unique identifier) of the devices to approve or deny them click on "oui" from the top right corner, add the oui, select the segment, and then approve or deny the devices you can approve or deny all devices in a particular segment by clicking on "all" from the top right corner however, nile does not recommend using this method as it can pose a security risk you can upload a csv file to specify rules for multiple devices click on "upload csv" from the top left corner, download the sample csv file, create your own file, and then upload it the nile access service also offers additional features for managing wired device access, such as the ability to upload pre approved device lists, enable auto mac auth for specific device types, and configure port locking and geographical restrictions refer to the nile wired access management faq docid\ nqrx00kdrs4w4lgx fqn4 for details
