Wireless (General)

IDE 9.4 is interpreting Mac Auth from a Cisco Wireless Lan Controller as a Radius intead of Mac Auth request. This is preventing me from using IDE to authenticate using Mac Auth.

Hello Brian,

Pls check the the device template in the config of this Authenticator (the WLAN Controller) to see if the ‘mac-address source type’ is set to ‘user-name’ instead of ‘calling-station’id’.

Shmulik

Here is the details....

And here is the database entry for this MAC address:

Brian,

Do you have MAC Auth enabled in the Authenticator configuration for that Cisco AP? and also have the appropriate MAC Auth Access Policy associated with that AP?

Shmulik

Ok. Setting ‘mac-address source type’ to ‘user-name’ fixed the issue. One last related question. Will changing this option in IDE have any impact on 802.1x authentications or is this setting only used for MacAuth?

No should not impact. Because you likely have various auth protocols enabled (incl. TLS and others) on the Authentication Policy, and the switch/AP will first attempt to auth via more secure protocols and IDE will respond accordingly.

Shmulik