topic Re: Endpoint with 2 simultaneous connections in Network Access Control

Endpoint with 2 simultaneous connections

ostubbs — Mon, 12 Sep 2016 18:39:41 GMT

Hello Team,

Is there a way to prevent an endpoint from using two RADIUS connections simultaneously via a wired and wireless connection?

Thank you

Re: Endpoint with 2 simultaneous connections

Jason Kunst — Mon, 12 Sep 2016 18:46:08 GMT

There is no mechanism on ISE that will control that. You will need to rely on your supplicant. For example. Anyconnect NAM for windows only allows one interface (connection) at a time.

Re: Endpoint with 2 simultaneous connections

ostubbs — Mon, 12 Sep 2016 18:48:32 GMT

Thank you Jason.

Re: Endpoint with 2 simultaneous connections

ostubbs — Mon, 12 Sep 2016 19:04:08 GMT

Jason,

My cube mate was just having issues with his new MAC and he has a wired connection and his wireless NIC active. When he rebooted the laptop an 802.1x pop-up asking him which connection he wanted to authenticate against (wired or wireless).

Can provide some explanation as to what this is?

Re: Endpoint with 2 simultaneous connections

Jason Kunst — Mon, 12 Sep 2016 19:14:56 GMT

This is a MAC apple OS X issue, have you checked the apple forums on the expected behavior and details?

Re: Endpoint with 2 simultaneous connections

ostubbs — Mon, 12 Sep 2016 19:21:33 GMT

I have not checked the apple forums regarding this behavior.

I thought to mention it because it happened after I reached out and the event seem related to perhaps the functional capability of ISE.

I'll check the apple forums

Thanks

Re: Endpoint with 2 simultaneous connections

Jason Kunst — Mon, 12 Sep 2016 19:23:21 GMT

There is no capability on ISE to have any such control of this behavior of the native supplicant on Apple MAC OSX

Re: Endpoint with 2 simultaneous connections

ostubbs — Mon, 12 Sep 2016 19:29:57 GMT

Thank you for the confirmation Jason.

I really appreciate the quick responses to my inquiries.