Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

ISE Authentication issue when configuring both profiling and 802.1x

Hi all

I have an issue when configuring profiling and 802.1X EAP-TLS at the same time. When configuring EAP-TLS only, users can authenticate using their certificates without any problem.

Once I enable profiling, the MAC address of the EAP-TLS client is recorded into the internal database of ISE, and then the client is authenticated through MAB.

Any idea to solve this issue ?
 

1 REPLY
Cisco Employee

You shoudl be able to

You shoudl be able to accomplish this by changing the authentication priority/order on the switchport(s) 

 authentication order dot1x mab

 authentication priority dot1x mab

 

Hope this helps!

 

Thank you for rating helpful posts!

55
Views
0
Helpful
1
Replies
CreatePlease to create content