Wireless WPA2-Enterprice use Mac address authen first?

[TimeOut]

I have cisco WLC and cisco ISE

and understand  WPA2-Enterprice security using user and password authentication 

Question:

If we need to overwirte use mac address authentication on ISE first  on wireless WPA2-Enterprice security. Can i do it?

Because test configure ise authentication Wireless_MAB and the first rule using mac address identity group

then try to connect wireless still enter user and password

[MHM Cisco World]

can you more elborate 

MHM

[Saikat Nandy]

I reckon you want to use MAB+dot1x - if my understanding is correct then you can use it.

[TimeOut]

thx for reply 

but if we want to use mab only  by wpa2 enterprice   can we do ?

[Saikat Nandy · Accepted solution]

MAB through WPA2 enterprise is not possible as these 2 are separate from each other. MAB comes during association phase whereas WPA protocols, AKM comes post association.. so the options you have are - 

1. Either use MAB only.
2. Use WPA2 enterprise only.
3. USE MAB+dot1x