topic Re: Cisco ISE 802.1X with MAB Wireless authentication in Network Access Control

Cisco ISE 802.1X with MAB Wireless authentication

ezzaariyouness — Sun, 27 Feb 2022 12:28:20 GMT

Hello ;

actually, I'm setting up wireless authentication On cisco ISE 3.0 with 802.1X MS-CHAPv2 and MAB, but it's not working.

my objective it's authenticating users based on the username/password and MAC for this I apply it to the authentication Policy.

I'm sure that I'm doing something incorrectly.

find attached the policy that I created.

can you please help me create this correctly?

Best regards

Younes

Re: Cisco ISE 802.1X with MAB Wireless authentication

Rob Ingram — Sun, 27 Feb 2022 13:09:55 GMT

@ezzaariyouness change the policy set condition to Wireless_8021x OR Wireless_MAB, the supplicant is only ever going to do one at time.

If you want to combine valid Username/Password (802.1x) and MAC address, then use an Identity Group that lists all the valid MAC addresses, then on the Authorisation Policy combine an AD Group AND the Identity Group.

Re: Cisco ISE 802.1X with MAB Wireless authentication

ezzaariyouness — Tue, 01 Mar 2022 15:08:29 GMT

Thank Rob , it's work now .

best regards

Younes