×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

ISE Authentication issue when configuring both profiling and 802.1x

Unanswered Question
Aug 19th, 2014
User Badges:

Hi all

I have an issue when configuring profiling and 802.1X EAP-TLS at the same time. When configuring EAP-TLS only, users can authenticate using their certificates without any problem.

Once I enable profiling, the MAC address of the EAP-TLS client is recorded into the internal database of ISE, and then the client is authenticated through MAB.

Any idea to solve this issue ?
 

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
nspasov Thu, 08/21/2014 - 09:08
User Badges:
  • Cisco Employee,
  • Cisco Designated VIP,

    2017 AAA, Identity and NAC Security

You shoudl be able to accomplish this by changing the authentication priority/order on the switchport(s) 

 authentication order dot1x mab

 authentication priority dot1x mab

 

Hope this helps!

 

Thank you for rating helpful posts!



Actions

This Discussion