Hi all, I summarize quickly what we tried to do before writing this enhancement request: The switch should have a default port config for all access ports, allowing mab and dot1x. ISE should answer with a template name in the result, bringing the port to it's target config for the authorized end device.
-> A flexconnect ap requires a trunk port with host-mode multi-host.
-> A workstation requires an access port with host-mode multi-auth.
At the moment, this works only with several restrictions and dependant on the customer requirements, there is no default port config which can be changed to all required target configs.