Technical Tip: 802.1x port-based vs MAC-based authentication

[sachitdas_FTNT]

Description

This article provides information when to configure 802.1x port-based and MAC-based.

Related document: 

https://docs.fortinet.com/document/fortiswitch/7.2.4/fortilink-guide/756049/fortiswitch-security-pol...

Solution

Refer to the above link to configure 802.1x authentication.

It is possible to restrict access with 802.1X port-based authentication or with 802.1X MAC-based authentication.

Use port-based authentication when the client is connected directly to a switch port and is capable of 802.1X authentication.

Use MAC-based authentication when more than one device needs to be authenticated on the same switch port, and it is necesary to authenticate based on the MAC address. 

It is also possible to enable MAB when devices behind the port do not support 802.1X.