ISE 2.2 MYSQL database design MAB

Richard Lucht — Fri, 21 Feb 2020 18:49:09 GMT

Hello all, So I followed the guide https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-22/210521-Configure-ISE-2-2-for-integration-with-M.html for setting up MySQL and connecting it to ISE. That connection part works fine. MySQL is working fine. The guide shows setting up a users group then a table for groups and mapping users to those groups. I understand that part. What I am looking for is a very simple setup. I what to set up one group that stores mac address that we can use mac address bypass. The MAB will be for devices that we can't put certs on like printers and other peripheral devices.

Does anyone have a MySQL database design for mac address bypass that would be willing to share?

Re: ISE 2.2 MYSQL database design MAB

Octavian Szolga — Mon, 19 Mar 2018 09:24:43 GMT

Hi,

If you want to use a MYSQL db to store your MACs in it, there's not need for a design document.

You just have to edit the MAB rule to something like:

Wired or WiFi MAB request -> search user (MAC) in identity store -> your_mysql_db

Thanks,

Octavian

topic ISE 2.2 MYSQL database design MAB in Network Access Control

ISE 2.2 MYSQL database design MAB

Re: ISE 2.2 MYSQL database design MAB