BYOD ; that's a nice concept. But ; I think it does work only for "Wireless" (by using something called "bootstrap profile") and not for "wired"  ?   Back to my last issue : port-based authentication of a workstation never joined to a domain. That seems not be possible, since workstation has to automatically send username/password to RADIUS ? ... View more

Thank you for the generous stuff @BrothersTM.   For RADIUS, I will be correct. I played a lot with NPS, when I was working on my MCSA 2008R2.   By the way ; I'm not sure AD is aware of MAC addresses. So far ; my understanding of AD is, it does authentication by username and/or computer ID. The username/password is manually provided by a user. The computer account (with automatic password) is automatically generated when the Workstation is added to the domain. When the station is added to the domain, it is said that a "trust" relationship is established between the Domain Controller and the Workstation ; that's a security level, which is not based on MAC address.   My understanding of 802.1x Port-based authentication is ; basically, it asks to RADIUS if a switch port can be opened (or not), by verifying of the credentials of the computer (or the user using it). That process does not necessarily need to take into account of MAC-Adresses.   In conclusion. MAC-Based Access Control and Port-Based Access Control could be two different issues.   One next subject I will need to investigate. How a workstation not belonging to AD could authenticate (Port-Based) with a RADIUS server (using AD) ? ... View more

Thanks @Uberseehandel. You sent the good link. It explains on Win10 what @MRCUR's link is explaining on Win7.   I'll try them, two ; I will let you know.     ... View more

Thanks for that generous stuff.   @MRCUR. Your second link ("Wired AutoConfig") seems to be what exactly I was looking for. I'll try it and will let you know.   @Uberseehandel. The URL you sent is not working for me. It seems to be talking about "wireless". Even 802.1x is used for the access control to wireless routers (APs), I'm not sure port-based authentication does make sense in the wireless world ? the issue I'm facing seems tu be a purely "wired" issue.     ... View more

I'm trying to do 802.1x Port-Based authentication.   That is. The computer is allowed to communicate by a given switch port, if a user (from or behind the computer) is authorized by NPS (RADIUS). That user must be known by the AD database. ... View more

See below, similar example, with Switch and NPS, https://integratingit.wordpress.com/2011/11/06/configuring-role-based-cli-interface-access-2/ Missing for me (for Port-Based authentication) is something equivalent to the two last Telnet printScreens. ... View more

Sorry, if I did not use the good word ("MAC-Based").   What I'm trying to make work is Port-Based authentication by 802.1x authentication standard. that authentication standard need RADIUS feature ; that feature is provided by NPS feature. NPS is using Active Directory database.   It seems I'm very closed to the final solution. The small missing part is how user username/password is sent to the NPS (RADIUS) server ? That user could be a MAC address or have any other username. ... View more