Question

A network engineer must onboard several networked printers that do not support 802.1X supplicant capabilities. The printers connect to switchports also configured for 802.1X, but the engineer wants ISE to authenticate the printers by their MAC addresses and assign them limited network access. Which combination of actions correctly implements this on ISE?

Accepted Answer

Add the printer MAC addresses to an endpoint identity group, and create an authorization policy that matches that group and the MAB authentication protocol

Answer

Create an internal user account for each printer and configure an authentication policy referencing the internal user identity store

Answer

Enable EAP-TLS on the printers and issue certificates from the ISE internal CA so they can perform 802.1X

Answer

Configure a Guest portal and require the printers to complete self-registration before accessing the network