topic Thanks for that pointer. I in Network Access Control

OSX Dot1X Authentication as machine

Petrus van de Sande — Mon, 11 Mar 2019 05:11:50 GMT

We've configured Dot1X authentication on both wired and wireless networks, using PEAP as the outer method and host/user authentication on the inside.

All Windows clients work perfectly but the Apple OSX devices are having issues as they only authenticate as a user, once the user has been authenticated on the computer.

I've created a profile in iPhone Configuration Utility and set it to use %AD_ComputerID% as username and installed this profile as root, so in the system settings. However, the MacBook still only uses the actual user name... This happens both wired and on wireless.

Authentication is done on ISE 1.2.1 patch level 3 against MS Windows 2012 AD. The access switches are 3650's on IOS XE 3.3.5.

Any help to get MacBook to talk Dot1X as a machine would be greatly appreciated!

Sounds similar a bit https:/

Saurav Lodh — Wed, 19 Nov 2014 23:47:33 GMT

Sounds similar a bit https://discussions.apple.com/thread/4990427
Can you see the authentication logs from ISE operations , and see the machine auth details?

Thanks for that pointer. I

Petrus van de Sande — Thu, 20 Nov 2014 13:01:07 GMT

Thanks for that pointer. I don't think it's the same thing but I've got some new clues as to how to troubleshoot the issue.

I can't see the authentication in ISE because the MacBook simply doesn't attempt to log on without an active user session.