cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

2487
Views
10
Helpful
5
Replies
Highlighted
Participant

Add New MAC Address for MAB on Identity Groups

Hi Guys,

 

I want to add new MAC address to Endpoint Identity Groups to my ISE, so my IP phone can bypass dot1x authentication process via MAB. The thing is, I was unable to add the new MAC address since it is not on the available list, even though the IP phone is already connected to the network for more than 1 month. And I could not find a way to add that MAC address to the list. Is there any way I can add MAC address so it can be found on the list?

 

I found a workaround by connecting the IP phone to a port where dot1x is active. This way, the MAC can be found on the list because it was challenged for authentication. But I find it is not practical since I have hundreds of IP phone to be registered.

 

Thank you.

3 ACCEPTED SOLUTIONS

Accepted Solutions
Highlighted
VIP Mentor

Hi

You can add a new mac address by going on menu workcenter/Network Access/Identity.

On the table at the bottom, click the + sign and add the new mac address, and select the right group policy for him by selecting assign static policy.

You can also import a csv if you have multiple mac addresses to add.

Thanks
Francesco
PS: Please don't forget to rate and select as validated answer if this answered your question

View solution in original post

Highlighted

Hi Francesco,

 

I already obtained the csv template and got the example csv file from ISE. Correct me if I'm wrong, but not all the columns should be filled right? Even if it is filled from the exported file. From my observation, I only need to fill these fields: MACAddress, IdentityGroup, AuthorizationPolicyMatchedRule, SelectedAuthorizationProfiles, StaticAssignment, and StaticGroupAssignment. Do I miss something?

 

And after the csv file is good to go, I need to import the file to the ISE from Work Centers -> Network Access -> Identities -> Import -> Import From File -> Submit. Is this correct?

 

Thank you.

View solution in original post

Highlighted

Hi,

In your case, just two fields : MacAddress(eg: 00:00:00:00:00:00) & IdentityGroup (eg: IP Phone), Please don't delete any columns.

you can import the file to ISE on this path Context visibility->Endpoints->Import->Import from file->Choose the file->Submit->Ok

-Aravind

View solution in original post

5 REPLIES 5
Highlighted
VIP Advisor

Highlighted
VIP Mentor

Hi

You can add a new mac address by going on menu workcenter/Network Access/Identity.

On the table at the bottom, click the + sign and add the new mac address, and select the right group policy for him by selecting assign static policy.

You can also import a csv if you have multiple mac addresses to add.

Thanks
Francesco
PS: Please don't forget to rate and select as validated answer if this answered your question

View solution in original post

Highlighted

Hi Francesco,

 

I already obtained the csv template and got the example csv file from ISE. Correct me if I'm wrong, but not all the columns should be filled right? Even if it is filled from the exported file. From my observation, I only need to fill these fields: MACAddress, IdentityGroup, AuthorizationPolicyMatchedRule, SelectedAuthorizationProfiles, StaticAssignment, and StaticGroupAssignment. Do I miss something?

 

And after the csv file is good to go, I need to import the file to the ISE from Work Centers -> Network Access -> Identities -> Import -> Import From File -> Submit. Is this correct?

 

Thank you.

View solution in original post

Highlighted

Hi,

In your case, just two fields : MacAddress(eg: 00:00:00:00:00:00) & IdentityGroup (eg: IP Phone), Please don't delete any columns.

you can import the file to ISE on this path Context visibility->Endpoints->Import->Import from file->Choose the file->Submit->Ok

-Aravind

View solution in original post

Highlighted

Hi Aravind,

 

Thanks for the help. Cheers.

Content for Community-Ad