https://community.cisco.com/t5/network-access-control/authentication-order-problem-when-upgrading-to-2-4/m-p/3710393#M490498 You should be working with the tac to investigate the differences and log a bug if warranted <BR /> Thu, 20 Sep 2018 12:28:45 GMT Jason Kunst 2018-09-20T12:28:45Z https://community.cisco.com/t5/network-access-control/authentication-order-problem-when-upgrading-to-2-4/m-p/3710379#M490497 <P>We have seen problem with authentication order after we upgraded from 2.1 to 2.4 . We currently have 100% MAB authentication but have running config for last 6 months :</P> <P>&nbsp;</P> <P>authentication order dot1x mab</P> <P>authentication priority dot1x mab</P> <P>&nbsp;</P> <P>But after we upgraded to 2.4 we needed to change order to mab first to get clients especially win xp clients that have dot1x active to get an IP. It looks like it never tries to go to mab authentication when we check logs in ISE. This was never a problem before upgrade, either with dot1x on clients without certificate or the order. Anyone have any ideas what could have changed between 2.1 to 2.4 around this?</P> <P>&nbsp;</P> <P>I would like to keep the order with dot1x first as we now start rolling out new clients with certificate.</P> <P>&nbsp;</P> Thu, 20 Sep 2018 12:04:22 GMT https://community.cisco.com/t5/network-access-control/authentication-order-problem-when-upgrading-to-2-4/m-p/3710379#M490497 d.stavasen 2018-09-20T12:04:22Z https://community.cisco.com/t5/network-access-control/authentication-order-problem-when-upgrading-to-2-4/m-p/3710393#M490498 You should be working with the tac to investigate the differences and log a bug if warranted <BR /> Thu, 20 Sep 2018 12:28:45 GMT https://community.cisco.com/t5/network-access-control/authentication-order-problem-when-upgrading-to-2-4/m-p/3710393#M490498 Jason Kunst 2018-09-20T12:28:45Z