cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1125
Views
0
Helpful
1
Replies

Cisco ISE EasyConnect and 802.1x

djoseph18
Level 1
Level 1

We are using Cisco ISE as the NAC and are trying to configure both EasyConnect and 802.1x on the same switch (some interfaces for EasyConnect and some for 802.1x) - if possible

 

We currently have it set up where if i connect to specific ports EasyConnect policies SHOULD allow/deny access, and the same for 802.1x interfaces that have been configured.

 

What we are seeing is that even on interfaces configured for 802.1x, it's getting the correct DACL applied, but auth is passing from an EasyConnect policy and not the 802.1x policy.

 

Any assitance would be appreciated

1 Reply 1

What is the use-case here?  Why not just go full 802.1X?  What is your authentication order and priority settings on the switch port?  802.1X or MAB first?