topic Thanks for your answer in Network Access Control

[ISE or ACS] EAP-TLS or profiling only on same SSID

Patrick Tran — Mon, 11 Mar 2019 04:51:19 GMT

Hi,

I can configure only one SSID on which 2 types of devices have to connect:

Devices with certificates connect on this SSID using EAP-TLS
Devices without certificates that ISE profiles (or ACS checks their MAC Addresses)

Could this work?

How can I configure this type of SSID on WLC?

802.1X works
802.1X+MacFiltering Works.
I didnt succeed to configure 802.1X OR MAC Filtering...

Thanks for your help,

Patrick

Have you checked the BYOD

Saurav Lodh — Fri, 04 Jul 2014 09:46:01 GMT

Have you checked the BYOD guide below? Refer the Authentication rules

http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Borderless_Networks/Unified_Access/BYOD_Design_Guide/BYOD_ISE.html

Thanks for your answer

Patrick Tran — Fri, 04 Jul 2014 10:24:25 GMT

Thanks for your answer.

Devices without certificates are not a smartphone but a specific device that cant receive a certificat from ISE.

My use case is not possible (answer from my Cisco support) so I will close this topic.

Hi Patrick, Yes, that´s

Roger Base — Fri, 04 Jul 2014 18:22:36 GMT

Hi Patrick,

Yes, that´s possible, You can use MAB for devices that cannot handle certificates on the same SSID.

Hello Patrick-Unfortunately,

nspasov — Tue, 08 Jul 2014 06:08:24 GMT

Hello Patrick-

Unfortunately, I don't believe this is currently possible in the Cisco wireless world with a single SSID. For your example, you will need two separate SSIDs. Something similar has been asked before:

https://supportforums.cisco.com/discussion/11941331/isewireless-nacone-ssid-mab-and-dot1x

Hope this helps!

Thank you for rating helpful posts!