I normally deal with Windows NPS for the radius needs and the majority of my sites have DELL campus switches. The point is you’ll have to wrap your head around port authentication with 802.1x and its various options, permutations on the switches and radius servers. I’ll be sharing my experiences in the future. 802.1x allows for Single-Session/Single-Host, Single-Session/Multiple-Host, Multiple- Session (names, abilities vary with switch type, model, vendor) and you’ll need to work out what is needed where for the scenarios you want to support, you won’t have one size fits all with port authentication. Depending on your needs the configuration and setup will differ.
When you have a Hyper-V switch that you share with the management OS you will see that the management vNIC now authenticates.
Reg add “HKEY_LOCAL_MACHINE\SYSTEM\CURRENTControlSet\Services\vmsmp\parameters” /v 8021圎nabled /t REG_DWORD /d 1 /f You will need to add a registry key in order for it to be enabled.
Windows Server 2019 LTSC (1809) & Windows 10 (1809), as well as the 1809 or later SAC versions, now offer 802.1x Support with the Hyper-V switch. You’ll see that the authentication properties are there, the policies to make it all work are pushed but no joy, authentication would fail 802.1x Support with the Hyper-V switch is here! 802.1x Support with the Hyper-V switch looks like it could or should work when looking at the vNICs both on the host and inside the VMs. On top of that, there was always at least someone less than happy with the workaround. But in conditions where multiple interfaces are a requirement, this becomes impractical (not enough outlets, multiple dongles etc. Sometimes it was an extra NIC on non-authenticated ports, physical security for rooms with non-authenticated ports, going Wi-Fi everywhere and for everything etc. This was needed due to the fact that the Hyper-V switch did not support 802.1X EAPoL. Anyone who has had to support developers and IT Pros alike running Hyper-V on their clients and test systems in an environment with 802.1x port authentication knows the extra effort you had put into workarounds.
0 kommentar(er)
