ISE 2.2 MYSQL database design MAB

[Richard Lucht]

Hello all, So I followed the guide https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-22/210521-Configure-ISE-2-2-for-integration-with-M.html for setting up MySQL and connecting it to ISE.  That connection part works fine.  MySQL is working fine.  The guide shows setting up a users group then a table for groups and mapping users to those groups.  I understand that part.  What I am looking for is a very simple setup.  I what to set up one group that stores mac address that we can use mac address bypass.  The MAB will be for devices that we can't put certs on like printers and other peripheral devices.  

Does anyone have a MySQL database design for mac address bypass that would be willing to share?  

[Octavian Szolga]

Hi,

If you want to use a MYSQL db to store your MACs in it, there's not need for a design document.

You just have to edit the MAB rule to something like:

Wired or WiFi MAB request -> search user (MAC) in identity store -> your_mysql_db

Thanks,

Octavian