10-15-2018 08:06 PM
Hi Guys,
I want to add new MAC address to Endpoint Identity Groups to my ISE, so my IP phone can bypass dot1x authentication process via MAB. The thing is, I was unable to add the new MAC address since it is not on the available list, even though the IP phone is already connected to the network for more than 1 month. And I could not find a way to add that MAC address to the list. Is there any way I can add MAC address so it can be found on the list?
I found a workaround by connecting the IP phone to a port where dot1x is active. This way, the MAC can be found on the list because it was challenged for authentication. But I find it is not practical since I have hundreds of IP phone to be registered.
Thank you.
Solved! Go to Solution.
10-15-2018 09:12 PM
10-15-2018 10:12 PM
Hi Francesco,
I already obtained the csv template and got the example csv file from ISE. Correct me if I'm wrong, but not all the columns should be filled right? Even if it is filled from the exported file. From my observation, I only need to fill these fields: MACAddress, IdentityGroup, AuthorizationPolicyMatchedRule, SelectedAuthorizationProfiles, StaticAssignment, and StaticGroupAssignment. Do I miss something?
And after the csv file is good to go, I need to import the file to the ISE from Work Centers -> Network Access -> Identities -> Import -> Import From File -> Submit. Is this correct?
Thank you.
10-16-2018 01:26 AM
Hi,
In your case, just two fields : MacAddress(eg: 00:00:00:00:00:00) & IdentityGroup (eg: IP Phone), Please don't delete any columns.
you can import the file to ISE on this path Context visibility->Endpoints->Import->Import from file->Choose the file->Submit->Ok
10-15-2018 08:19 PM - edited 10-15-2018 08:22 PM
Replied to your other thread with the screenshot.
https://community.cisco.com/t5/identity-services-engine-ise/add-new-mac-address-for-mab-on-identity-groups/m-p/3725941
10-15-2018 09:12 PM
10-15-2018 10:12 PM
Hi Francesco,
I already obtained the csv template and got the example csv file from ISE. Correct me if I'm wrong, but not all the columns should be filled right? Even if it is filled from the exported file. From my observation, I only need to fill these fields: MACAddress, IdentityGroup, AuthorizationPolicyMatchedRule, SelectedAuthorizationProfiles, StaticAssignment, and StaticGroupAssignment. Do I miss something?
And after the csv file is good to go, I need to import the file to the ISE from Work Centers -> Network Access -> Identities -> Import -> Import From File -> Submit. Is this correct?
Thank you.
10-16-2018 01:26 AM
Hi,
In your case, just two fields : MacAddress(eg: 00:00:00:00:00:00) & IdentityGroup (eg: IP Phone), Please don't delete any columns.
you can import the file to ISE on this path Context visibility->Endpoints->Import->Import from file->Choose the file->Submit->Ok
10-16-2018 01:47 AM
Hi Aravind,
Thanks for the help. Cheers.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide