I have a lab environment with ClearPass and an Aruba CX 6300M switch. Two firewalls are connected to the switch, and I want the ports to be authorized only if the device's MAC address is present in the ClearPass Host Repository (Host List).
in the sources i create a new one with the List that i create.
Here is the list
radius-server host xxx.xxx.xxx.xxx key ciphertext xxxxxxx
radius dyn-authorization enable
and in the interface:
port-access onboarding-method concurrent enable
aaa authentication port-access allow-cdp-bpdu
aaa authentication port-access allow-lldp-bpdu
aaa authentication port-access dot1x authenticator
enable
aaa authentication port-access mac-auth
enable
what i do wrong? i need to decline the connection if the mac is not trust and accept if it is inthe host list