Skip to main content
HS08
Explorer
August 5, 2026
Question

802.1x user vs computer authentication.

  • August 5, 2026
  • 2 replies
  • 32 views

When we use user authentication then we can enable dynamic vlan assigment based on the user group, example user group IT will get vlan IT and user HR will get vlan HR.

Now when we switch from user authentiction to computer authentication the primary authentication will use certificate stored in computer and this make dynamic vlan based on user group is not working.

Anyone here ever try to combine computer authentication but enabled dynamic vlan based on the user group?

2 replies

AEK
SuperUser
SuperUser
August 5, 2026

Didn’t test it but if I’m not wrong NAC agent tells NAC which user is logged in once user logs in, and your policy will assign will do the rest. I mean place the NAC policy based on user-host on top of the NAC policy based on host only.

AEK
ebilcari
Staff
Staff
August 6, 2026

In addition, some details are covered here:

 

Emirjon
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.