cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2003
Views
50
Helpful
2
Replies

Cisco ISE 802.1X with MAB Wireless authentication

ezzaariyouness
Level 1
Level 1

Hello ;

actually, I'm setting up wireless authentication On cisco ISE 3.0 with 802.1X MS-CHAPv2 and MAB, but it's not working.

my objective it's authenticating users based on the username/password and MAC  for this I apply it to the authentication Policy.

I'm sure that I'm doing something incorrectly.

find attached the policy that I created.

can you please help me create this correctly?

 

Best regards

Younes

1 Accepted Solution

Accepted Solutions

@ezzaariyouness change the policy set condition to Wireless_8021x OR Wireless_MAB, the supplicant is only ever going to do one at time.

 

If you want to combine valid Username/Password (802.1x) and MAC address, then use an Identity Group that lists all the valid MAC addresses, then on the Authorisation Policy combine an AD Group AND the Identity Group.

View solution in original post

2 Replies 2

@ezzaariyouness change the policy set condition to Wireless_8021x OR Wireless_MAB, the supplicant is only ever going to do one at time.

 

If you want to combine valid Username/Password (802.1x) and MAC address, then use an Identity Group that lists all the valid MAC addresses, then on the Authorisation Policy combine an AD Group AND the Identity Group.

ezzaariyouness
Level 1
Level 1

Thank Rob , it's work now .

best regards

Younes