How is the MAC Authentication of user name attribute format on Zyxel Switch

Zyxel_Chris
Zyxel_Chris Posts: 727  Zyxel Employee
Zyxel Certified Network Administrator - WLAN Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate 50 Answers
edited July 23 in Network Security

Answer:

To set up MAC Authentication Bypass (MAB) for your VOIP phones on a Zyxel switch, follow these steps:

  1. Ensure the switch port is configured as an Access Type with a RADIUS Auth profile associated with it.
  2. Enable MAB on the switch port.
  3. Verify that the switch forwards the MAC address of the device to the RADIUS server for authentication. The credentials forwarded should use the device's MAC address as the password in dash format, e.g., 'A0-A0-A0-A0-A0-A0' as like the following figure.
  4. Check that the RADIUS server is set to use the correct authentication protocol, such as PAP (Password Authentication Protocol).
  5. Confirm that the RADIUS server has the appropriate MAC details configured for authentication.

Figure: User name format of attribute.