Users Guide

126 Dell Networking W-ClearPass Policy Manager 6.0 | User Guide
Parameter Description Considerations
authentication; the end-host subsequently
reauthenticates using the newly provisioned PAC.
When enabled, Policy Manager accepts the end-
host authentication in the provisioning mode itself;
the end-host does not have to re-authenticate.
Required
end-host
certificate for
provisioning
In authenticated provisioning mode, the end-host
authenticates the server by validating the server
certificate, resulting in a protected outer tunnel; the
end-host is authenticated by the server inside this
tunnel. When enabled, the server can require the
end-host to send a certificate inside the tunnel for
the purpose of authenticating the end-host.
MAC-AUTH
The MAC-AUTH method contains one tab.
General Tab
The General tab labels the method and defines session details.
Figure 68: MAC-AUTH General Tab
Table 56:
MAC-Auth General Tab
Parameter Description
Name/Description Freeform label and description.
Type In this context, always MAC-AUTH.
Allow Unknown
End-Hosts
Enables further policy processing of MAC authentication requests of unknown clients.
If this is not enabled, Policy Manager automatically rejects a request whose MAC address is