MicroNugget: How to Use 802.1X and NAC

In this video, Keith Barker covers access control methods like MAC address filtering, 802.1x, and captive portals. These and other functions and features enable us to stop an individual on a network and validate their identity before letting them continue to the network resources.

If you've ever tried to access free WiFi at a hotel or coffeeshop and been greeted with a pop-up asking you to provide your room number or to agree to a user agreement before getting Internet access, you've encountered 802.1x.

Just like you don't let someone enter your living room without first knocking and introducing themselves, 802.1x provides a number of opportunities to find out who a user is before giving them access to anything on the network.

It can be beefed up with two-factor authentication (2FA), or extended with features like Network Access Control that grants users access only to pre-approved resources even once they're on the network.

Start learning with CBT Nuggets:

[soufianDEMOS]

No begging to subscribe, no annoying background music....straight to the point ! GREAT VIDEO !

[philjans]

That’s the best video!
And thanks for no annoying background music

[NK-iwrq]

Love this guy ! His videos are perfect for my ADD brain

[zacharyballard]

Thank you for the Video Keith! I am thinking about going down the cyber ops path once i pass my ICND2 exam.

[Waris-bvnu]

I hate network protocols, Very nice a precise thanks keith!

[LMGunslinger]

So 802.1x doesn't let them talk to anyone but the authenticator server, after they've been authenticated by the server the switch with 802.1x will then let them into the rest of the network?

[pace]

any plans to do a Cisco ISE3.0 video series?

[JerryWangAOE]

Great info, superb presentation, and a very nice Thank you at the end :-) TYSM

[sanaejha]

please can I know if the interface of identification come with the configuration of the server or should I create one thank you in advance

[twapandulahauwanga]

Is there a way through an ad server or so to only allow pcs that are on the domain to connect to company wifi/network? We use our AD creds to sign into the network I don’t want anyone connecting their personal computer to the network