topic Re: Cisco ISE Reauthentication in a bridged mode in Network Access Control

Cisco ISE Reauthentication in a bridged mode

lnw-team — Fri, 03 Feb 2023 12:13:54 GMT

Hello,

I have a problem with the following configuration: We are using the same VLAN/subnet for wired and wireless connection in one of our locations. The aim was to save IP addresses. It works fine but we would like to enhance it. We have come up with an idea to set network interfaces (wired and wireless) in a bridged mode so that they have the same MAC address and when the users switch between wired and wireless the IP address remains the same. Unfortunately there's an issue: we can change smoothly from wired to wireless but then, when we try to switch back to the wired connection, the client is not authenticated properly. I was trying to change reauthentication timer on the port but it does not change anyhing. Any ideas?

Re: Cisco ISE Reauthentication in a bridged mode

Aref Alsouqi — Fri, 03 Feb 2023 12:53:59 GMT

Why would you need to keep the same MAC for both connections? are you doing MAB or dot1x on your build?

Re: Cisco ISE Reauthentication in a bridged mode

lnw-team — Fri, 03 Feb 2023 13:16:16 GMT

We are using dot1x

Re: Cisco ISE Reauthentication in a bridged mode

Aref Alsouqi — Fri, 03 Feb 2023 13:23:26 GMT

The dot1x supplicant should trigger the re-authentication, what error do you see on ISE when you switch from wireless back to wired?

Re: Cisco ISE Reauthentication in a bridged mode

hslai — Sun, 05 Feb 2023 02:55:35 GMT

@lnw-team It could be a limitation of your bridging solution. If you provide how exactly you are bridging wired and wireless to share the same MAC address, the community might be able to help better.