Optimizing authentication for Thin clients

[Philip Vilhelmsson]

Hi,

Are using HP Thin Clients with Windows Embeded. At the moment we are trying authentication on switch ports. The thin clients are being authenticated with MAB.

We have run in to an anoying issue where the client asks for DHCP and displays an error saying "no network access" before the authorization process is completed, and then about 15 seconds later it gets an IP and everything works. 

The switchport is configured with an default VLAN that doesnt go anywhere and after successfull authorization the VLAN is changed to the client VLAN. 

I have tried optimizing the configuration by changing order and priority so that MAB happens before dot1x. We dont have many policies in ISE so moving the rule for the clients up does not help much.

Is there anything else I can do on the switch or ISE that will optimize the authentication/authorization flow?

Regards

Philip

[balaji.bandi]

At this moment we do not have any visibility where the problem accrued.

Can you take 1 of the client which has this issue, keep monitoring the logs from right from the switch to ISE and you sure have some evidence why this was the error accrued.

Do you have enough DHCP Scope available?

What is the switch model/version running and provide the configuration of switch to have look?