- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-10-2021 09:47 AM
Hi All,
I have a question around profiling and wirelessMAB. I have a device that I want to allow on the wireless based on profile. I see that when device tries to connect to the wireless it is getting profiled correctly. I have then created a policy set with RadiusFlowTye=WirelessMAB AND Called-Station-ID = <SSID> Protocol=Default network Access
In authentication I have modified the defalu rule to use All_user_ID_Stores (Options: If auth fails=Reject, If user not found= continue, If process fails=Drop)
It is at this authentication point that it is getting dropped. I see the message "22064 Authentication method is not supported by any applicable identity store(s)"
It looks like device is trying to use hostlookup as authetication Method when I look at Endpoint attributes.
Any ideas?
Thanks
Solved! Go to Solution.
- Labels:
-
Identity Services Engine (ISE)
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-10-2021 12:46 PM
Hello,
By defaut All_user_ID_Stores contains Internal Users, All AD join points and Guest Users.
Try to use Internal Endpoints instead of All user ID Stores and test your authentication.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-10-2021 12:46 PM
Hello,
By defaut All_user_ID_Stores contains Internal Users, All AD join points and Guest Users.
Try to use Internal Endpoints instead of All user ID Stores and test your authentication.
