Question

A network engineer is deploying MAB for a group of legacy badge printers on switch ports that are also configured for 802.1X. The printers do not support any 802.1X supplicant. On the switchport, the engineer wants the switch to attempt 802.1X first and only fall back to MAB if the endpoint does not respond to EAP requests. Which switchport configuration achieves this behavior?

Accepted Answer

Configure 'authentication order dot1x mab' and 'authentication priority dot1x mab' so the switch sends EAPoL and only initiates MAB after the dot1x timeout expires

Answer

Configure 'mab' only and remove the dot1x commands, since MAB and 802.1X cannot coexist on the same interface

Answer

Configure 'authentication order mab dot1x' so MAB is attempted first and 802.1X is used as the fallback method

Answer

Enable 'authentication open' so both methods run simultaneously and ISE decides which result to honor