Cisco ISE 802.1X with MAB Wireless authentication

[ezzaariyouness]

Hello ;

actually, I'm setting up wireless authentication On cisco ISE 3.0 with 802.1X MS-CHAPv2 and MAB, but it's not working.

my objective it's authenticating users based on the username/password and MAC  for this I apply it to the authentication Policy.

I'm sure that I'm doing something incorrectly.

find attached the policy that I created.

can you please help me create this correctly?

Best regards

Younes

[Rob Ingram · Accepted solution]

@ezzaariyouness change the policy set condition to Wireless_8021x OR Wireless_MAB, the supplicant is only ever going to do one at time.

If you want to combine valid Username/Password (802.1x) and MAC address, then use an Identity Group that lists all the valid MAC addresses, then on the Authorisation Policy combine an AD Group AND the Identity Group.

[ezzaariyouness]

Thank Rob , it's work now .

best regards

Younes