cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
346
Views
0
Helpful
1
Replies
Highlighted
Beginner

ISE 2.2 MYSQL database design MAB

Hello all, So I followed the guide https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-22/210521-Configure-ISE-2-2-for-integration-with-M.html for setting up MySQL and connecting it to ISE.  That connection part works fine.  MySQL is working fine.  The guide shows setting up a users group then a table for groups and mapping users to those groups.  I understand that part.  What I am looking for is a very simple setup.  I what to set up one group that stores mac address that we can use mac address bypass.  The MAB will be for devices that we can't put certs on like printers and other peripheral devices.  

 

Does anyone have a MySQL database design for mac address bypass that would be willing to share?  

1 REPLY 1
Participant

Re: ISE 2.2 MYSQL database design MAB

Hi,

If you want to use a MYSQL db to store your MACs in it, there's not need for a design document.

You just have to edit the MAB rule to something like:

Wired or WiFi MAB request -> search user (MAC) in identity store -> your_mysql_db

 

Thanks,

Octavian