From ClearPass perspective, it won't override anything. It will just process the request it received from the switch and send the radius response based on the service configuration. Then the override or priority assignment is depends on the switch side configuration and switch behavior."I can confirm after successful 802.1x auth i can see rejected mac-auth, but the user is working successfully.After days of investigation of auth issue :( , we are using EAP-TLS for machine auth and certain users having issue when they come to the office at the morning they must restart their pc in order to send auth request. and if they go to Sleep/Hibernation the same issue happened only solved by restart the pc.I found similar casesWhen systems resume from sleep; they do not attempt machine authentication; only user authentication. This is by design on WindowsMachine Authentication after resuming from Sleep/Hibernation | Security (arubanetworks.com)How to change the machine-authentication timeout | Security (arubanetworks.com)Machine Authentication after Windows Hibernation | Security (arubanetworks.com)is there is solution from clearpass side to solve this issue? combine user auth + machine auth to overcome this issue?
At Aruba, we believe that the most dynamic customer experiences happen at the Edge. Our mission is to deliver innovative solutions that harness data at the Edge to drive powerful business outcomes.
© Copyright 2021 Hewlett Packard Enterprise Development LPAll Rights Reserved.