cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1342
Views
0
Helpful
5
Replies

How to request MAC address registration using ISE guest portal??

We are trying to control devices through MAC authentication in ISE.

Department MACaddr Endpoint Identity Group Policy
Sales aa:aa:aa Sales Group 1.1.1.0 Permit
Marketing bb:bb:bb Marketing Group 2.2.2.0 Permit

ISE does not use user identity, only endpoint identity.

Is there a way to request the administrator to register the MAC address using the ISE guest portal?

5 Replies 5

balaji.bandi
Hall of Fame
Hall of Fame

So you looking only to register MAC address in the guest portal allow as guests? or OUI MAC vendors only?

 

this means you already have a list of the MAC address for ISE to add.

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Administrator say it's inconvenient to go through each employee's MAC address one by one.

So, we are looking for a way for employees to pass the MAC address and department name to the administrator through the guest portal.

Until you have list or collect to MAC List from user to build data right ? or you need ask user to input MAC Address (for normal user this is big task)

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

ISE hasn't been deploy yet.

We are currently testing the functionality of the ISE.

Im going tell the administrator that there is no function to request MAC address registration.

It would be a cumbersome task to create a large number of users as a local DB on ISE.

Unfortunately, a DB server such as Active Directory did not exist yet.

Any good ideas for collecting MAC addresses of current users in ISE?

ISE should log all of the MAC addresses in the ISE LiveLogs which can be summarized in Context Visibility and Reports > Authentication Summary.  You will not know which user(s) they are for until you implement authentication.

ISE does have a Device Registration capability for employees as part of the BYOD Registration. But it's a lot of work just to get a MAC address.

You can have employees authenticate with a Guest portal using their username:password but you don't have a Active Directory or other centralized user database.  8-(