Wireless 802.1x and MAC bypass with ISE 2.3

[Kudetauk77]

Hi All . 

I am new to ISE 2.3 , I am looking for a way to 

1. Authenticate AD users onto wireless BUT if the user is NOT in AD allow the PC in by creating a by pass using its MAC 

I would like a simple policy to allow this . 

Any assistance would be great I have been trying various options for 3 weeks and cannot find a way of doing it .

Thanks 

[balaji.bandi]

You can enable debug in switch and see what is wrong and ISE have good logging system.

Look at the good video which can explain clear how you can achieve this.

https://www.youtube.com/watch?v=XFJ8ff1l-hc

[patoberli]

Make sure you choose continue as the action if the first check fails. Then it should go into the next policy and not get a "failed" back after the first policy check.