topic Re: Cisco ISE - Access control by MAC address in Network Access Control

Cisco ISE - Access control by MAC address

OktawianZebrowski98629 — Mon, 30 Nov 2020 13:32:04 GMT

Hello All
How to set CiscoISE to allow the device to enter the network, using the sposnora portal, after selecting the MAC address.

Greetings!

Oktawian

Re: Cisco ISE - Access control by MAC address

Mike.Cifelli — Mon, 30 Nov 2020 13:42:32 GMT

Please take a peek here: ISE Guest Access Prescriptive Deployment Guide - Cisco Community

Also, note that there are great resources on the Network Access Control home page at the top. HTH!

Re: Cisco ISE - Access control by MAC address

OktawianZebrowski98629 — Mon, 14 Dec 2020 12:03:02 GMT

Hello,

THANK YOU VERY MUCH FOR YOUR ANSWER ! 🙂

Excuse me. I asked the wrong question.
I connect some controller/device to the switch, I know its MAC address and I want a specific user to be able to let this device into the network so that it will go into a separate VLAN.
Can I do this using My Devices Portal and how should I set the policies properly ?

Re: Cisco ISE - Access control by MAC address

Greg Gibbs — Mon, 14 Dec 2020 22:05:08 GMT

Restricting the MDP based on secondary attributes like AD Group membership is a bit tricky, but it can be done. See ISE Sponsor & My Devices Authorization on Secondary Attributes (LDAP) for more info.

If you're already using the MDP for another BYOD flow, you may need to create a second MDP that uses a unique Endpoint Identity Group that will be assigned to these MAC addresses so you can provide differentiated AuthZ based on that group membership.

Re: Cisco ISE - Access control by MAC address

OktawianZebrowski98629 — Tue, 15 Dec 2020 09:28:41 GMT

Thank you very much for your answer!

I use ISE 2.7 and I don't know in 1.3 because there are quite big differences.

In MDP I can add a device based on the MAC address, but the device status is still pending