A clinical tablet is denied. ISE has an allow rule for it and never sees a request. A MAC filter on the controller denies that MAC before authentication. What is blocking the tablet?
Select an answer to reveal the explanation.
Short Explanation
ISE never got a vote, because your controller already turned the tablet away. The MAC filter is the block. An allow rule that was never asked did not deny anyone.
Full Explanation
A MAC filter on the controller can reject a client before the authentication request is sent. ISE has an allow rule and never sees a request, which matches a filter that already denied the MAC. The ISE rule did not deny the tablet. It was not asked. An RF profile does not apply a MAC filter based on channel load. The beacon interval does not drop a MAC that policy would have allowed. A controller MAC filter denies the tablet before ISE can allow it. The ISE rule would have permitted the device. Check one live client after the change and leave the rest of the floor alone until that client matches the result you expected. Read the live counters after you retest. Confirm the symptom is gone on the next attempt before you change a second setting anywhere else on that floor. Exam caveat: removing the filter lets the request reach ISE, and ISE can still deny it for a different rule. Confirm the matched rule after the filter is gone. Operational check: remove this MAC from the filter, attempt the WLAN, and confirm ISE receives the request and allows the tablet.