topic ISE Guest wired access VLAN Flip in Network Access Control

ISE Guest wired access VLAN Flip

dargibson — Mon, 11 Mar 2019 02:38:20 GMT

My guest access through ISE is working find except I can't get it to flip the VLAN and move the guest PC to the guest VLAN. I have the Guest VLAN ID in the authorization policy. Can someone point me in the right direction with this?

Thanks,

ISE Guest wired access VLAN Flip

Tarik Admani — Sat, 06 Oct 2012 05:58:12 GMT

Are you able to get mapped the right policy? Also is change of authorizatoin (COA occuring) you should see in the monitoring logs an entry where dynamic authorization succeed message?

I would check the ssid advanced settings to see if AAA Overide and Radius NAC are enabled. In settings page in ISE (under administration > settings > profiling) see if the COA has been set to "reauth"...something other than "not enabled".

If you are having issues pullling a new ip address then check the operation tab in the guest portal configuration.

Thanks,

Tarik Admani
*Please rate helpful posts*

ISE Guest wired access VLAN Flip

dargibson — Tue, 09 Oct 2012 11:22:51 GMT

It looks like COA is taking place. SSID is not an issue, this is wired Guest access. Yes, COA is set to "reauth". I see in the logs were it issues a IP release and renew to the PC but don't see where the vlan is changed or trying to change.

Re:ISE Guest wired access VLAN Flip

Tarik Admani — Tue, 09 Oct 2012 14:26:05 GMT

If the coa is being issued then you need to check your authorization policy to see if the user is hitting the correct policy the second time. This is where the new vlan is applied.

Sent from Cisco Technical Support Android App