Physical Network Access Control with 802.1X

Today I'm diving in to the world of network access control! Being able to authenticate network devies plugged in to your switches is a great way to improve network security without resorting to unplugging or disabling every unused port on yout equipment. Now every switch port is universal, and will enable on demand based on what is plugged in. While I couldn't go through the complete authorization part of the setup (mapping devices to VLANs), I'm planning on making a future video for that step. Full instructions and commands on my blog: https://www.apalrd.net/posts/2024/network_dot1x/ RAYCON Everyday Earbuds: http://buyraycon.com/APALRD RADIUS History from The Serial Port: https://youtu.be/XC1-6MfnoKA More about BlastRADIUS: https://www.blastradius.fail/ Support me on Ko-Fi if you enjoy my content and find it useful: https://ko-fi.com/apalrd Feel free to chat about my upcoming projects on Discord! https://discord.gg/xJsaEukAr4 Follow me on Mastodon: https://hachyderm.io/@apalrd Timestamps: 00:00 - Introduction 01:16 - Architecture 05:17 - FreeRADIUS 09:34 - FreeRADIUS RADSEC 13:31 - FreeRADIUS EAP 16:24 - Certificates 24:37 - Start FreeRADIUS 26:26 - Authenticator Setup 30:25 - Supplicant 33:45 - Conclusion