Can we Use MAB with Cert and Dot1x (EAP_Fast) on One SSID with Meraki MR53

[azhar_eaggle1]

Hi, we have one SSID and 2 types of Environments. 

1. Corp Computer with MACHINE/username in AD (DOT1x with EAP_Fast) and using Corp SSID.
2. Corp Computers no MACHINE/Username in AD. wants to authenticate with MAB and Cert on Machine.

can we Use one SSID for Both types of Authentication?

we are Using ISE 2.4 and Meraki AP53.

[Nidhi]

Yes you can. Create 2 separate policy sets for  dot1x  and MAB and you can use a more generic condition check.

But you cannot authenticate an endpoint with MAB+ machine cert. 

Thanks,

Nidhi