Our company needs to to deploy 802.1x withinthe next couple of months.
We want to have a phased deployment that will incorporate a testing stage during that
periode using the "Monitor Mode" feature of Cisco switches.
I know how to set up the supplicant, authenticator and the authenicating server(Radius server on the ACS 5.2).
We also need to employ active directory into the process...that is where the confusion
comes in. I work primarily with Cisco not Microsoft so I will give that portion of the task
to our server guys!
My question is, if I configure monitor mode only on 1 of our 400 switches and have the
other 399 without any 802.1X configuration what so ever, will the users on those 399
switches without 802.1x still be able to access our production network?
Basically what I am trying to do is use just one of our buildings as a test site on our
production network without affecting all the users on our network.
Thanks in advance!