topic MAC- Based Authentication in ISE which license & methods are in use?? in Network Access Control

MAC- Based Authentication in ISE which license & methods are in use??

abdulwadood — Sun, 18 Jun 2023 13:49:05 GMT

I need to know that Can ISE supported MAC-based authentication as per the below request:

- If i want to achieve mac based authentication in essential licenses if yes then can I do it?

- if i want to achieve mac based authentication in the Advantage license how do I get it?

if I achieve Mac-based authentication in both licenses then what is the difference between the two licenses which option of the license is much better?

Re: MAC- Based Authentication in ISE which license & methods are i

Flavio Miranda — Sun, 18 Jun 2023 14:06:46 GMT

MAB is supported on both Essentials and Advanced. The difference you can see on the chart below:

"In ISE 3.0, higher licenses include lower licenses (the so-called Nested doll model). This means that you only need to purchase an Advantage license to have the functionality of the Essentials + Advantage license. In the old model, licenses were additive, you added different license levels, there were also requirements to have a minimum number of Base licenses to have X higher licenses, and so on."

Re: MAC- Based Authentication in ISE which license & methods are i

MHM Cisco World — Sun, 18 Jun 2023 14:25:25 GMT

For PSN the mab is aaa/802.1x which is support in essential license.

Re: MAC- Based Authentication in ISE which license & methods are i

Marvin Rhoads — Mon, 19 Jun 2023 13:56:16 GMT

The chart listed by @MHM Cisco World shows the license feature comparison. Practically speaking for MAB, Advantage license adds the ability to automatically profile an endpoint and use that profile in your Authorization policy rules. For instance, ISE can decide via profiling (and without admin intervention) that a Cisco phone is indeed a Cisco phone and then automatically add it to the IP phones endpoint group and have an authorization result to allow it access and assign it to the voice domain. Without profiling, you would have to assign the MAC addresses manually to the desired identity group(s).

Re: MAC- Based Authentication in ISE which license & methods are i

abdulwadood — Tue, 20 Jun 2023 13:59:19 GMT

Yes Thank you for your support

Re: MAC- Based Authentication in ISE which license & methods are i

Aref Alsouqi — Wed, 21 Jun 2023 11:34:23 GMT

https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/ise-licensing-guide-og.html