ISE Authentication issue when configuring both profiling and 802.1x

[amr.abdulwahab]

Hi all

I have an issue when configuring profiling and 802.1X EAP-TLS at the same time. When configuring EAP-TLS only, users can authenticate using their certificates without any problem.

Once I enable profiling, the MAC address of the EAP-TLS client is recorded into the internal database of ISE, and then the client is authenticated through MAB.

Any idea to solve this issue ?
 

[nspasov]

You shoudl be able to accomplish this by changing the authentication priority/order on the switchport(s) 

 authentication order dot1x mab

 authentication priority dot1x mab

Hope this helps!

Thank you for rating helpful posts!