How to do in NPS 802.1X MAB Authentication by the first acts of the MAC address?

Question

Computer networks

Good afternoon! We have a case: there are certain devices that cannot be authorized via dot1x, so it was decided to give access to the network via MAB, but very often (during the day several times) these devices change, that is, for example, a client comes to service center and brought the device for repair - it must be connected to the network. This causes a lot of inconvenience and hassle for the constant establishment of new accounts in AD for these devices. BUT there is such a pattern that most of these devices are from the same manufacturer and have the same first act of the MAC address. So, the question is: is it possible to somehow implement a policy using NPS that will carry out authorization by the first acts of the MAC address, that is, for example, create one account for this fragment of MAC addresses and that’s all,

Answer 1

umm... make a separate subnet for them? without authorization through AD?