802.1X again

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

802.1X again

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
802.1X again
802.1X again
2017-06-16 17:35:25
Model : T2600G-52TS

Hardware Version : Not Clear

Firmware Version : 2.0.0 Build 20160923 Rel.39814(s)

ISP : -

I wish to deploy 802.1X auth in our network, but no luck. I have followed this guide: http://www.tp-link.com/hu/faq-787.html but not even able to trick the switch to try to authenticate against the radius server. Even the port stays authenticated however I expect it to change:




Any idea, suggestion... anything?
  0      
  0      
#1
Options
9 Reply
Re:802.1X again
2017-06-19 17:25:52
I just realised that after the firmware upgrade I have booted the old one. Changing to the latest firmware did not help, still no 802.1X.
  0  
  0  
#2
Options
Re:802.1X again
2017-06-19 18:47:00
Hahh, progress. Now I can see a MAB column for the port config, and enabling the MAB now I can see the access requests and answers, and enabled the network security/802.1X/VLAN Assignment too. However answering the following:
(4) Sent Access-Accept Id 49 from 10.34.32.12:1812 to 10.34.32.21:45645 length 0
(4) Reply-Message = "Device with MAC Address 5C-FF-35-0C-57-67 authorized for network access"
(4) Tunnel-Type = VLAN
(4) Tunnel-Medium-Type = IEEE-802
(4) Tunnel-Private-Group-Id = "2"
(4) Finished request

I cannot see the port effected. The VLAN 2 is a blackhole one once a machine is fallen into should not able to ping outside, but it still can. My goal to use RADIUS server to auth and select VLANs for each MAC.
  0  
  0  
#3
Options
Re:802.1X again
2017-08-01 21:38:57
To continue my monologue:
- Still cannot get it working.
- The support sent useless answer (a .jpg crop of the documentation, which was unavailable anyway at the moment) regarding what the MAB/VLAN assigment is. I know what it is, that's why I want it.
- Meanwhile I have set up a RouterOS hotspot/MAB with the very same RADIUS server, and it is working, so I suppose the RADIUS server configuration is correct.
- The support cannot answer even the simple questions like "is my (switch) configuration correct?"

Did anyone ever managed to get help from TP-Link?
  0  
  0  
#4
Options
Re:802.1X again
2017-08-09 15:40:15
Did you configured the guest vlan in 802.1x? Guest vlan can't work work with MAB at the same time in TP-LINK managed switch. I have asked them.
  0  
  0  
#5
Options
Re:802.1X again
2017-08-10 01:33:13
No, the guest network is disabled - fortunately.
  0  
  0  
#6
Options
Re:802.1X again
2017-08-10 13:49:25

fisherhu wrote

No, the guest network is disabled - fortunately.

I have not T2600G-52TS,but I have T2600G-28TS. I do the simple test accoridng to the FAQ you said.802.1X function is working well.
Did you disable the status of port that connect to radius server?
I suggest you configure port based 802.1X firstly, if every woking well then configure MAB and vlan assign.
  0  
  0  
#7
Options
Re:802.1X again
2017-08-11 01:54:16
- the 802.x working
- mab working
- the vlan assignment not working (seems the switch ignores th Tunnel-Private-Group-Id) attribute.

Meanwhile the support started to answer to my emails whitin a day, instead 9 days, so I hope it will be clear soon what the problem is.

Now I have two threads here and the emails and not all in sync so I think I better "close" these ones and focus on the e-mails then provide the solution here once everything is clear.

  0  
  0  
#8
Options
Re:802.1X again
2017-08-22 20:58:14
Any success? We're currently facing the same issue on a T1600.
  0  
  0  
#9
Options
Re:802.1X again
2019-02-28 15:09:53

Same issue here with a T2600G-28TS v3:

- 802.x working
- mab working
- vlan assignment not working (seems the switch ignores the Tunnel-Private-Group-Id attribute).

 

And found the solution in TP-Link Guide "Configuration Guide for 802.1X VLAN Assignment and MAB":

   "VLAN Assignment takes effect only when the control type is Port Based. Set the control type as Port Based on the ports connected to clients."

 

Your screenshot shows Control Type "MAC based".

  0  
  0  
#10
Options

Information

Helpful: 0

Views: 1998

Replies: 9

Related Articles