Printer not hitting MAC rule
06-11-2019 11:24 PM
I have a Spare printer connected to LAN port and when i check the logs it is hitting EAP TLS service and not hitting MAC rule which is below EAP-TLS rule .
It is getting rejected
The authentication method in access tracker is showing blank
User not found
RADIUS Test AD Wired - testad.test-intra.net: User not found.
Cannot select appropriate authentication method
I am not sure why printer us hitting EAP service
Re: Printer not hitting MAC rule
06-17-2019 04:58 AM
In general, the MAC authentication service should be above the 802.1X service for the same SSID.
The authentication method (MAC/802.1X) is evaluated after the service has been selected. If a request does not match the right service, either add modify the service condition rules of the service that should not match and/or move the rule that does not match before that wrongly matching rule.
Please note that how to order services and resolve conflicts like there is very fundamental ClearPass knowledge and doing the wrong thing can break complete networks. If you haven't engaged with a professional for design and advice, for a production environment you should do so.
If you have urgent issues, please contact your Aruba partner or Aruba TAC (click for contact details).