I'm trying to MAC auth HP printers with CPPM. By default, the HP comes with the hostname NPIXXXXXX where XX is the last half of the mac address. So, when I set the cisco port to MAB, the printer sends the username NPIXXXXXX and because the service is looking for username=MAC address, service classification fails. If we change the hostname of the printer to the MAC with no delimiter, it sends the hostname as the username, which happens to match the MAC and the service categorization is successful as in my enforcement policy.
I've tried a service with the "Connection:Client-Mac-Address EXISTS" and the request gets classified properly, but I get the following Alert in Access Tracker:
"MAC_AUTH: No password in request. Not attempting MAC authentication
Cannot select appropriate authentication method"
Has anyone seen this before?