WLC C9800 with 2 method authenticate L2 and L3

[jewfcb001]

Hi All 

I try to configure 2 method for C9800-CL authenticate L2 and L3 authenticate . 
L2 use mac filtering and L3 use web authenticate but I configure 2 method the client confuse and cannot connect to wireless
but if configure only 1 authentication method per ssid can do it . Can I configure 2 method per SSID?

Thank you .

[Haydn Andrews]

Suggest using RADIUS to do the MAC filtering as well as the WebAuth.

I have only done L2/3 together to have PSK on the SSID prior to the web Auth to stop DHCP exclusion and then WebAuth to do the T&Cs

[jewfcb001]

@Haydn Andrews 
Thank you for response. 
You mean mac filtering (dot1x) and webauth with local ? and L2/L3 (Mac+Web) can configure or not?
Because the customer need 2 method with 1 SSID C9800 can do ?

[jewfcb001 · Accepted solution]

I find this document L2(MAB)+L3(LWA) is Support . 
Thank you all for answer .

https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-12/config-guide/b_wl_17_12_cg/m_vewlc_central_web_authentication.html#create-the-redirect-acl-definition