Prevent clients from bridging wired and wireless on ISE ?

[Kjetil Fleten]

Hi

For the clients that are connected wired or wireless to corporate network, we want to prevent them from having a concurrent connection to guest network or own mobile hot-spots at the same time. Can ISE "listen" to a client's network interfaces, and reject the device if more than one network interface has an IP ?

[jan.nielsen]

Not really, something could probably be done with NAC, but it's gonna be very difficult to make it work well. I would suggest using the Cisco NAM supplicant instead of windows, and then use eap-chaining, to make sure people are acutally using NAM, it can handle switching between wifi/wired/3g