Skip to main content

MAC Authentication Bypass (MAB)

For devices that can't do 802.1X — printers, cameras, IoT — authenticate them by their MAC address instead, and still assign a VLAN.

Add a MAB entry​

  1. Go to Network → RADIUS / NAC → MAC Auth Bypass → Add.
  2. Fill in:
    • Name (e.g. 3rd‑floor printer).
    • MAC address or OUI prefix — a full MAC (b4:22:00:ad:37:dd) or a vendor prefix (b4:22:00) to match a whole manufacturer.
    • Device type (optional) — used in policy matching / profiling.
    • VLAN (e.g. 30) — where matched devices land.
  3. Apply. Edit or delete entries from the list.

Anti‑spoofing​

Because MAC addresses can be forged, DashX has a spoof mode (set on the Overview tab):

  • Off — MAB matches purely on MAC.
  • Monitor — allows the device but flags likely spoofing for review (a safe default).
  • Enforce — blocks devices that look spoofed.
tip

Use an OUI prefix to onboard a whole fleet of same‑vendor devices (e.g. all your Zebra printers) with one entry, then tighten to specific MACs if you need to.