topic Re: Difference between authentication order and priority in Network Access Control

Difference between authentication order and priority

dgaikwad — Mon, 11 Mar 2019 08:55:00 GMT

Hi Experts,
While configuring for ISE I came across these two commands, authentication order and authentication priority.
The question is, if I have already specified the order with which authentication should happen, then what is the use of authentication priority command?

Which are the scenarios could these both commands could be leveraged?

Re: Difference between authentication order and priority

Mohammed al Baqari — Tue, 05 Feb 2019 06:47:44 GMT

This document explains it perfectly

https://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/identity-based-networking-service/application_note_c27-573287.html

Re: Difference between authentication order and priority

socratesp1980 — Tue, 05 Feb 2019 06:59:44 GMT

Authentication order define the sequence of authentication method used by the network device. The authetication priority dicates the prefered method. For example. auuthentication order dot1x mab authentication priority mab dot1x In this example the dot1x will be used first and then mab. Howver the prefered method will be the mab

Re: Difference between authentication order and priority

dgaikwad — Wed, 06 Feb 2019 09:43:48 GMT

In my environment, I have the following commands set on the port, this way
authentication order dot1x mab
authentication priority dot1x

So, in this case, there is no other method specified for a fallback, what could be the result of this setup?