3

I know that 802.1x can track MAC addresses. If MAC address is used on one port then you can prohibit it from being used on another port.

Can 802.11x protocol do the same thing for IP addresses?

My underlying question which triggered that one. Can a user connect to 802.1x using his/her credentials and after change IP address to somebody else IP address to get access to some resources which are protected based on IP address?

3
  • 1
    dot1x only establishes the user's identity; it has nothing to with IP addressing Commented May 23, 2016 at 19:01
  • 2
    Consider implementing Layer2 security in parrallel with dot1x. Many providers integrate these features into their switching products. Look up port-security with dhcp-snooping and dynamic arp inspection from your preferred vendor. example:- juniper.net/techpubs/en_US/junos13.3/topics/example/…
    – user4565
    Commented May 23, 2016 at 20:15
  • @user4565 Thank you. This is exactly what I was looking for (DHCP-snooping and DAI) Commented May 24, 2016 at 15:19

1 Answer 1

2

dot1x only establishes the user's identity; it has nothing to with IP addressing

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.