Wireless Access

Is there a way to enable MAB authentication for the wireless clients in a parallel to 802.1x. For example I would want the devices to attempt 802.1x authentication first and once a timer times out or it fails the request I would want the controller to attempt MAB? I still want to use our external NPS (RADIUS) Servers to pass the MAB authentication. I set up a group on the test controllers for MAB authentication using the external servers (same as our dot1x radius servers) and when enabled it killed authentication for the test 802.1x client and did not pass MAB authentication for the Wireless Client that was setup for MAB on the back end.

No.  Failure of the EAP exchange means failure of the session.

Is there a way to enable MAB authentication for the wireless clients in a parallel to 802.1x. For example I would want the devices to attempt 802.1x authentication first and once a timer times out or it fails the request I would want the controller to attempt MAB? I still want to use our external NPS (RADIUS) Servers to pass the MAB authentication. I set up a group on the test controllers for MAB authentication using the external servers (same as our dot1x radius servers) and when enabled it killed authentication for the test 802.1x client and did not pass MAB authentication for the Wireless Client that was setup for MAB on the back end.

We were able to get the Radius server to authenticate the client.  I can see it on the wireless LAN, we just don't get an IP address for that client.  Any ideas?

No.  Failure of the EAP exchange means failure of the session.

Is there a way to enable MAB authentication for the wireless clients in a parallel to 802.1x. For example I would want the devices to attempt 802.1x authentication first and once a timer times out or it fails the request I would want the controller to attempt MAB? I still want to use our external NPS (RADIUS) Servers to pass the MAB authentication. I set up a group on the test controllers for MAB authentication using the external servers (same as our dot1x radius servers) and when enabled it killed authentication for the test 802.1x client and did not pass MAB authentication for the Wireless Client that was setup for MAB on the back end.

We were able to get the Radius server to authenticate the client.  I can see it on the wireless LAN, we just don't get an IP address for that client.  Any ideas?

No.  Failure of the EAP exchange means failure of the session.

Is there a way to enable MAB authentication for the wireless clients in a parallel to 802.1x. For example I would want the devices to attempt 802.1x authentication first and once a timer times out or it fails the request I would want the controller to attempt MAB? I still want to use our external NPS (RADIUS) Servers to pass the MAB authentication. I set up a group on the test controllers for MAB authentication using the external servers (same as our dot1x radius servers) and when enabled it killed authentication for the test 802.1x client and did not pass MAB authentication for the Wireless Client that was setup for MAB on the back end.