SD-Access Fabric disable 802.1X for Wired connection

[DuNguyen1212]

Hi all,

I have SDA Fabric and all config pushed by DNA Center.

I see DNA Center push config relate to AAA (class-map, policy-map, template, assign template to interface)

I want disable 802.1x only wired connection.

Has anyone done this yet?

p/s: i had attach config file push by DNAC

Thank you very much for your interest!

[Greg Gibbs]

The Authentication Template is defined within the Provision > Fabric Sites > Host Onboarding section. If you do not want NAC (MAB/Dot1x) enabled on the switchports, you would use the 'None' option.

[DuNguyen1212]

But 'None' option will impact all fabric site: wired + wireless.

I want disable 802.1x only for wired

[DuNguyen1212]

Wired client will use MAB

Wireless client use 802.1x

[Greg Gibbs · Accepted solution]

If that's possible, you will likely need to create a site hierarchy or custom templates of some sort to accomplish it.
This is more of a DNAC question that it is ISE/NAC, so you might be better off posting on the DNA Community.