MAC BASED AUTHENTICATION ON ISE

[vinayjaiswal]

Hi All,

Can we perform mac based authentication on ISE ?

I am doing the same on WLC but have reached the maximum limit.

Is there a way to do the same on ISE 2.3 ?

If Yes, then how ?

[Marvin Rhoads]

Sure - the feature is know as MAC Authentication Bypass (MAB). You can do it for both wireless and wired networks using ISE.

[agrissimanis]

Absolutely, yes, it is possible. You would need to add the MAC addresses to a particular Endpoint identity group and then check the membership of the group in your authorization rules. It is easy to do, but depends on how familiar you are with ISE.