topic ISE and machine authentication in Network Access Control

ISE and machine authentication

nicanor00 — Mon, 11 Mar 2019 03:54:37 GMT

I have ISE 1.1 : user authentication is working fine

Now I need to implement machine authentication

But I have 2 requirement

1- User must remove and plug his network cable as he want (without close windows session or restart his computer) and his computer should be authenticated evry time as with user authentication

2- I must not install any software or client applicatin on the computer

Is there any method of machine authentication that respect thise 2 requirements above

Regards

ISE and machine authentication

Jatin Katyal — Tue, 17 Sep 2013 16:44:16 GMT

So are you looking for ONLY machine authentication or you want machine to be authenticated first place followed by a user authentication.

~BR
Jatin Katyal

**Do rate helpful posts**

ISE and machine authentication

nicanor00 — Tue, 17 Sep 2013 17:17:49 GMT

Yes I want machine to be authenticated first place followed by a user authentication

ISE and machine authentication

Jatin Katyal — Tue, 17 Sep 2013 17:23:36 GMT

I guess you need to review the below listed thread as we are discussing the same thing. You have to create an authorization rule highlighted in the screen shot.

https://supportforums.cisco.com/message/4044276#4044276

~BR
Jatin Katyal

**Do rate helpful posts**

ISE and machine authentication

harvisin — Tue, 17 Sep 2013 17:41:55 GMT

Hello,

The link below will definetely help you out:-

https://supportforums.cisco.com/docs/DOC-21825

ISE and machine authentication

rikkoenig — Tue, 17 Sep 2013 18:52:36 GMT

Best way would be to run a MS CA, use GPO to push certs to the computers and set up the local supplicant (again via GPO) to use EAP TLS. It's not bad if you're all Win7. If you have some XP machines, a separate policy will be required.

We did this and it ran pretty well, for both wired and wireless.

ISE and machine authentication

kaaftab — Wed, 18 Sep 2013 00:51:50 GMT

Kindly check the following link for MAB configuration and working

http://www.cisco.com/application/pdf/en/us/guest/netsol/ns171/c649/ccmigration_09186a008087ad6f.pdf