ISE will see these as two different endpoints based on the mac address. If you click on the device in the endpoint database can you see how ISE discovered these two mac addresses? How do you have this WLC connected to your network?
Well, that means that every device, that has more than one mac-address might show up as multiple entries in the profiling database, is that true ??? That would be true for switches, too, each with a different mac in each vlan it might carry ???
Thats not very satisfying, I am thinking about a single switch carrying about a hundred different vlans showing up in the database .......
Is there a way to avoid this ???
The wlc is connected directly to the lab network (one C3560E, one AP 1142N and the ISE)
The 3560 is connected via dot1q trunk to a C4510R-E (to make it reachable for the ISE)
I have attached the screenshots of the two entries in the database ...