Hello Dear,
I have an issue with cisco ISE 2.7, windows 10 20H and cisco 3850
I need cocurrent authentication dot1.x and mab for AVAYA and windows 10
mab works correctly and dot1x does not.
all windows 10 fall into mab and in live log i can not see dot1x authentication...only mab.
in some switches, we have to restart the ip phone and sometimes dot1x works.
Here is my config
policy-map type control subscriber DOT1X-DEFAULT
event session-started match-all
10 class always do-all
10 authenticate using dot1x priority 10
20 authenticate using mab priority 20
event violation match-all
10 class always do-all
10 restrict
event agent-found match-all
10 class always do-all
10 authenticate using dot1x
event authentication-failure match-all
10 class AAA-DOWN do-all
10 authorize
20 activate service-template CRITICAL
30 terminate mab
40 terminate dot1x
20 class DOT1X-FAILED do-all
10 authenticate using mab
aaa authentication login default group tacacs+ local line enable
aaa authentication enable default group tacacs+ line enable
aaa authentication dot1x default group ISE-GROUP
aaa authorization config-commands
aaa authorization exec default group tacacs+ local if-authenticated
aaa authorization commands 1 default group tacacs+ if-authenticated
aaa authorization commands 15 default group tacacs+ local if-authenticated
aaa authorization network default group ISE-GROUP
aaa accounting update newinfo periodic 2880
aaa accounting identity default start-stop group ISE-GROUP
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 1 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
