Tagged: 802.1X
4 posts · browse all tags
-
Arista SD-Branch Part 8: Wired 802.1X and MAB Policy with AGNI on EOS
The wired access policy end to end: EOS 802.1X and MAC-based authentication config, an EAP-TLS network with MAC fallback in AGNI, and the commands to verify a session from the switch and the platform.
-
Arista SD-Branch Part 9: Wireless EAP-TLS, UPSK and Guest Portal Policy with AGNI
Wireless access policy with AGNI and CV-CUE: RadSec for access points, an EAP-TLS SSID, UPSK for IoT, and a captive-portal guest SSID with VXLAN tunnelling. Documented from Arista's published lab material.
-
Five Minutes and an Empty Port Part 10: The Closing Checklist and a Vendor Comparison
Closing the series: a practical checklist pulling Parts 7 through 9 together, and a straight comparison of how Cisco, Fortinet, Juniper, and Arista actually implement each control.
-
Five Minutes and an Empty Port Part 8: 802.1X, MAB, and the NAC Platforms Behind the Curtain
Port security answers whether a device is the one already learned on a port. 802.1X and the NAC platforms behind it answer the harder question: whether this specific identity, on this specific device, should be on the network at all.