ISE MAC addr & User binding

[Xinyu Zeng]

My client would like to setup MAC addr & user binding when deploy ISE.

The request is as following: After user login via CWA, the device MAC address is bonded with user account. If the same device is reconnected,  authorization will permit access.

[hslai]

Yes, this is supported since ISE 1.3 release.

[Xinyu Zeng]

Client would like to bind the MAC address to user's identity database. Do we have a procedure or script to do this work?

[hslai]

ISE does it the other way around. The user info (PortalUser) is an endpoint attribute in the internal endpoint store.

[Xinyu Zeng]

OK， seems I may need writing some scripts to make it.

Thanks so much.