Add AAA server to WLC
Add the WLC to the AAA server
Create a radius server group
Create an AAA authentication list
Create an AAA accounting list
On the 9800 create a policy profile either local switching or central switching
Tie the AAA accounting list to the policy profile
Circle back to the WLAN and define the following: MAC filtering – authorization list
Associate the WLAN to the AAA server that will authenticate the MAC address
On the AAA server define the policy set
Connect client and verify auth failure (client’s MAC is not in ISE)
Add the MAC address to ISE / AAA server as an end point
Connect client and verify connectivity
