topic if you have a list of all the in Network Access Control

Specific users on ISE

jack samuel — Mon, 11 Mar 2019 07:14:08 GMT

Dears,

I have a wireless ssid for managers on this ssid only manager should connect and it is working through pre-shared key authentication. At present the password is known to most of the non manager users what I want is that only managers laptop MAC address should only be allowed on this SSID rest others should not connect.

How I can achieve the above ??

thanks

if you have a list of all the

Tarik Admani — Wed, 16 Nov 2016 23:14:38 GMT

if you have a list of all the mac addresses for the manager devices, then you can do the following -

enable mac filtering on the ssid

import the mac addresses into ISE, reference the endpoint identity group in an authorization policy, you can even add the SSID name via the called-station attribute to your policy.

ISE will only allow approved mac addresses after they enter the proper psk from the ssid.

Thanks.

You can create endpoint

Gagandeep Singh — Thu, 17 Nov 2016 10:04:59 GMT

You can create endpoint identity group where you can put all mac addresses want to allow.

Can use this same identity group with Airspace wlan-id as a condition in authorization policy. This way it will work for specific SSID and endpoint group.

Regards

Gagan

Rate if it helps!!!!!