Skip to main content
Question

wired 802.1X with AD computer authentication


Forum|alt.badge.img+2

Hello
I have macOSc Monterey in my company
I want to configure 802.1X ethernet (based on computer authentication), my macOS are bind to AD
I have already made a configuration that works but the connection is not automatic.
Is it possible to configure this connection so that it is launched when the mac starts?

thanks

6 replies

Forum|alt.badge.img+8
  • Valued Contributor
  • 90 replies
  • December 5, 2022

Are you using ADCS certificate or using any in house cert? if in-house cert then did you trust those certificate on you profile? did you use certificate common name on trusted server certificate name?


Forum|alt.badge.img+1
  • New Contributor
  • 9 replies
  • December 6, 2022

The IEEE 802.1X standard defines the port-based network access control that is used to provide authenticated wired access to Ethernet networks. This port-based network access control uses the physical characteristics of the switched Local Area Network (LAN) infrastructure to authenticate devices attached to a LAN port. KDealer Login


Forum|alt.badge.img+8
  • Valued Contributor
  • 90 replies
  • December 6, 2022

@pm2956 Yes it is possible. I configure our network like this. But u need to select right type of EAP Accepts and also trust your certificate and also add common name name. 


Forum|alt.badge.img+2
  • Author
  • New Contributor
  • 1 reply
  • December 6, 2022

Hello
Thank you for your answers.
@sharif_khancan you send me some screenshots of your configuration?
thank you


RCRC74
Forum|alt.badge.img+3
  • New Contributor
  • 7 replies
  • April 18, 2023
sharif_khan wrote:

@pm2956 Yes it is possible. I configure our network like this. But u need to select right type of EAP Accepts and also trust your certificate and also add common name name. 


@pm2956 @sharif_khan could you please send me some screenshots of this configuration, including the trust & certificate sections?  Looking at getting this working for our AD bound Macs too.  Our network team says that they are using PEAP so no certificate should be needed.  We also don't want to use a ADCS setup, thanks!


jamessmilleree
Forum|alt.badge.img+2

I am not able to see my post.


Reply


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings