I would personally avoid adding specific device IP addresses, and instead add the subnet that they are in.  Then this whole exercise becomes trivial.   It also means if you deploy additional 802.1x devices you don't need to touch ISE. ... View more