I think it's best to have a look at what is configured and what you see together with your partner and/or TAC. If the client MAC address IS in the Endpoint repository, there should not be a message that it's not. Unless you modified the Endpoint Repository authentication source which may break the standard behavior.
When I check in my ClearPass, the Endpoint repository is queries based on 'Connection:Client-Mac-Address-NoDelim'; what I would do is (after verifying that there were no changes to made to the authentication source) check in Access Tracker if Client-Mac-Address-NoDelim (under Computed Attributes) contains the MAC address in the same format as it's should have, so lower-case and no delimiters (example: 98fe9ca23390). If a client connects for the very first time, there is no entry in the Endpoint Repository, but if you check after the authentication, it has been added. The fact that the entry exists in the endpoint repository does not mean it was there at the time of authentication, but you can see the 'Added' time for the device.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your HPE Aruba Networking partner, distributor, or Aruba TAC Support. Check
https://www.arubanetworks.com/support-services/contact-support/ for how to contact HPE Aruba Networking TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or HPE Aruba Networking.
In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------
Original Message:
Sent: Jul 15, 2025 02:00 AM
From: happyrp
Subject: Error Code: 206
Hello @Herman Robers
As you say, this is an expected behavior on a port configured for both 802.1X and MAC authentication. Yes, that's how it is configured as of now but I see the endpoints do have entries in Repository.
802.1x service policy:
MAC Authentication Service:
Original Message:
Sent: Jul 14, 2025 07:24 AM
From: Herman Robers
Subject: Error Code: 206
That may be normal behavior, depending on how your ClearPass is configured.
What this log says is that MAC authentication is attempted, but there is no entry for the device's MAC in either the Guest Device Repository, nor in the Endpoints repository; so it's a 'unknown MAC address'. If this is on a port configured for both 802.1X and MAC authentication, this is expected.
If you have issues, you may need to have a closer look. And it may be good to have a look together with someone familiar/experienced with ClearPass to validate your policy and configuration.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your HPE Aruba Networking partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact HPE Aruba Networking TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or HPE Aruba Networking.
In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.