Cisco ISE - Authentication & Authorization

[mkouame17]

Dear Guys,

I would like to know whether it is possible to do authentication based on the mac address of the endpoint, the endpoint(PC) should be on the AD store and the the login/password of the user coming from the AD store.

En resume, authenticate the endpoint(PC) and the user. The MAC address of the endpoint should be on the local store and the enpdoint and the user should register in the AD.

The rule should be :

USER => MAC_address + AD1:USER_DOMAIN then PROFILE2 

COMPUTER => MAC_address + AD1:COMPUTER_DOMAIN then PROFILE1

OR 

USER => MAC_address + AD1:USER_DOMAIN then PROFILE2

COMPUTER => AD1:COMPUTER_DOMAIN  then  PROFILE1

[balaji.bandi]

Best Approach is :

ISE is the First place to authentication :

1. based on MAB or DOT1X  - this need Switch side configuration with ISE

2. you can use Certificate authentication if you want over WIFI also.

Once Above process then, User in the network.

Now the PC can login to Domain using AD Authentication to join the domain.

is this make sense ?

BB