About JonatanSitter

JonatanSitter · 12-05-2023

Hello everybody, I'm looking into how to allow MAB for endpoints which had successful 802.1x authentication. Is there a way to update some endpoint attribute based on a successful 802.1x authentication which then gets used whenever the client (for wh...

JonatanSitter · 03-31-2021

I just started using the Cisco CLI Analyzer as my default SSH-Client and I'm quite happy with all the tools and features it provides, but I've started noticing an error message in my log everytime I connect to one of my switches.The error message loo...

JonatanSitter · 12-06-2023

Could you maybe give me some hints, what to look for?

JonatanSitter · 12-05-2023

Can that be done automatically?i.e. if authenticated successfully -> endpoint gets assigned a certain endpoint identity group which later can be referenced in MAB authz policy.

JonatanSitter · 12-05-2023

What about PXE boot for example? In that case the PC/Laptop does not respond to 802.1x and needs to fall back to MAB. I want to only allow that if it has previously authenticated successfully and not just for any pxe device.

JonatanSitter · 12-05-2023

Thanks for the helpful response. I know that 802.1x supersedes MAB. But as you might know, sometimes an endpoint fails to authenticate over 802.1x.At that point the switch allows for MAB. I want ISE to authenticate/authorize an endpoint over MAB only...

JonatanSitter · 04-01-2021

That's why I added the tag "Cisco CLI Analyzer" as I believe it's a bug in the analyzer tool.Today I updated from 3.6.6 to 3.6.7 and I haven't seen the error in the log again.I will keep an eye on it.

Member Since	‎01-25-2021 07:38 AM
Date Last Visited	‎09-19-2024 03:36 AM
Posts	10
Total Helpful Votes Received	1

User Statistics

User Activity

ISE Allow MAB for endpoints which had successful Dot1.x authentication

CLI Analyzer - %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived.

Re: ISE Allow MAB for endpoints which had successful Dot1.x authentica

Re: ISE Allow MAB for endpoints which had successful Dot1.x authentica

Re: ISE Allow MAB for endpoints which had successful Dot1.x authentica

Re: ISE Allow MAB for endpoints which had successful Dot1.x authentica

Re: CLI Analyzer - %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived.