Exam 300-715 topic 1 question 194 discussion

D- https://www.linkedin.com/pulse/mac-authentication-bypass-priyanka-kumari/ When MAB is enabled on the switch interface, then the switch will do the following things The switch takes each new mac address and sends it to Radius Server in case of cisco we use ISE for authentication as radius server. Fills Radius Attributes (Username and Password) with MAC address. Fills Radius Attribute (Calling Station ID) with the MAC address. A ISE can authenticate MAB devices either based upon Calling Station ID or Username and Password. -- If Process Host Lookup is enabled on ISE then Authentication is done based upon Calling Station ID. --If Process Host Lookup Is disabled on ISE then Authentication is done based upon username/ password. In order to enable Process Host Lookup on ISE (Policy > Policy Elements > Results > Authentication > Allowed Protocols).

Expandir Allowed Protocols Authentication Bypass Process Host Lookup Used for mac-auth bypass of network access devices

I think D is correct: https://community.cisco.com/t5/network-access-control/ise-mab-host-lookup-pap-or-eap-md5/td-p/2048671