3

I know that 802.1x can track MAC addresses. If MAC address is used on one port then you can prohibit it from being used on another port.

Can 802.11x protocol do the same thing for IP addresses?

My underlying question which triggered that one. Can a user connect to 802.1x using his/her credentials and after change IP address to somebody else IP address to get access to some resources which are protected based on IP address?

  • 1
    dot1x only establishes the user's identity; it has nothing to with IP addressing – Mike Pennington May 23 '16 at 19:01
  • 2
    Consider implementing Layer2 security in parrallel with dot1x. Many providers integrate these features into their switching products. Look up port-security with dhcp-snooping and dynamic arp inspection from your preferred vendor. example:- juniper.net/techpubs/en_US/junos13.3/topics/example/… – user4565 May 23 '16 at 20:15
  • @user4565 Thank you. This is exactly what I was looking for (DHCP-snooping and DAI) – Victor Ronin May 24 '16 at 15:19
2

dot1x only establishes the user's identity; it has nothing to with IP addressing

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.