MicroNugget: How to Use 802.1X and NAC

Start learning cybersecurity with CBT Nuggets. courses.cbt.gg/security
In this video, Keith Barker covers access control methods like MAC address filtering, 802.1x, and captive portals. These and other functions and features enable us to stop an individual on a network and validate their identity before letting them continue to the network resources.
If you've ever tried to access free WiFi at a hotel or coffeeshop and been greeted with a pop-up asking you to provide your room number or to agree to a user agreement before getting Internet access, you've encountered 802.1x.
Just like you don't let someone enter your living room without first knocking and introducing themselves, 802.1x provides a number of opportunities to find out who a user is before giving them access to anything on the network.
It can be beefed up with two-factor authentication (2FA), or extended with features like Network Access Control that grants users access only to pre-approved resources even once they're on the network.
🌐 Download the Free Ultimate Networking Cert Guide: blog.cbt.gg/mbwq
⬇️ 13-Week Study Plan: CCNA (200-301): blog.cbt.gg/pw4d
Start learning with CBT Nuggets:
• CompTIA Network+ (N10-007) | courses.cbt.gg/lvb
• Intro to Networking | courses.cbt.gg/tuv
• Building a Network Design | courses.cbt.gg/0g9

[@soufianDEMOS]

No begging to subscribe, no annoying background music....straight to the point ! GREAT VIDEO !

[@philjans1]

That’s the best video! And thanks for no annoying background music

[@NK-iw6rq]

Love this guy ! His videos are perfect for my ADD brain

[@zacharyballard2044]

Thank you for the Video Keith! I am thinking about going down the cyber ops path once i pass my ICND2 exam.

[@DEDEPLDEDE]

Good one Mr. Keith

[@jurryaany]

God I love these micronuggets!

[@agamlord]

Perfect, thanks!

[@faithisabel25]

Thank you, Sir

[@HBFREEWORLD]

Excellent !

[@cbtnuggets]

Glad you like it!

[@sundsalharbi8817]

Thanks

[@JerryWangAOE]

Great info, superb presentation, and a very nice Thank you at the end :-) TYSM

[@Waris-bv7nu]

I hate network protocols, Very nice a precise thanks keith!

[@poor_impulsive]

how can you hate network protocols? 😵

[@LMGunslinger]

So 802.1x doesn't let them talk to anyone but the authenticator server, after they've been authenticated by the server the switch with 802.1x will then let them into the rest of the network?

[@pace1134]

any plans to do a Cisco ISE3.0 video series?

[@twapandulahauwanga9691]

Is there a way through an ad server or so to only allow pcs that are on the domain to connect to company wifi/network? We use our AD creds to sign into the network I don’t want anyone connecting their personal computer to the network

[@cbtnuggets]

Hi Twapandula, yes, there are ways to do this by different mechanisms. One can be by group policy and the other can be with a radius server and ensure AD credentials are there to log on. We have videos on this through our Windows Server 2016 and 2019 courses you can find on our website here: www.cbtnuggets.com/

[@sanaejha165]

please can I know if the interface of identification come with the configuration of the server or should I create one thank you in advance

[@cbtnuggets]

Hi Sanae, thank you for your question. To clarify, do you mean if a client is trying to authenticate it will report the interface they are coming in from?

[@andrianrapon404]

Password???

[@summertyme5748]

password123 of course!