topic wireless users in Network Access Control

wireless users

Boris Alban Cedric NZIMBOU KIMBEMBE — Mon, 11 Mar 2019 02:33:51 GMT

Hi All ,

I ve got this message error on cisco ISE 3315 when my wireless users authenticate .

" Dynamic Authorization failed : 11213 No response received from Network Access Device"

I have a cisco ISE 3315

and My access-point is a CISCO WAP4410N without controller (WLC)

My access point is register in the ISE NETWORK DEVICES.

wireless users

Tarik Admani — Wed, 19 Sep 2012 12:53:36 GMT

Hi,

Standalone ap do nit support coa. If you are not profiling devices you can disable it in the deployment settings. You can also disable coa in the admin settings under the profiling section.

wireless users

Boris Alban Cedric NZIMBOU KIMBEMBE — Wed, 19 Sep 2012 14:59:16 GMT

Ok i will try but if i disable it does it impact the other equipement in the ISE,

wireless users

Tarik Admani — Wed, 19 Sep 2012 15:08:12 GMT

Hi,

Are you using coa in your entire deployment?

Thanks,

Tarik Admani
*Please rate helpful posts*

wireless users

Boris Alban Cedric NZIMBOU KIMBEMBE — Wed, 19 Sep 2012 15:53:18 GMT

yes we are using CoA in all the deployment !!!!

Is it necessary to deploy CoA for the Switches ?

Can I disable CoA only for That equipement (Ap Standalone )

wireless users

Tarik Admani — Wed, 19 Sep 2012 16:43:11 GMT

You will not be able to turn off CoA and you can not suppress this from being sent since this is a global configuration. The messages will appear since S.A aps are not supported for COA but you can still keep it in the deployment if you are using this just to authenticate users for the first time.

thanks,

Tarik Admani
*Please rate helpful posts*

wireless users

Boris Alban Cedric NZIMBOU KIMBEMBE — Wed, 19 Sep 2012 17:02:11 GMT

Thanks Tarik ,

My wireless User Posture status still in pending and there authorisation profile still Posture remediation , But they have access to their application normaly is it because the S.A AP doesn't support CoA ???

wireless users

Tarik Admani — Wed, 19 Sep 2012 17:05:49 GMT

Yes that is correct, you can not use the posture functions on these network devices. Since posture requires COA in order to flip the user session from not compliant to compliant this is where you users stay stuck.

You should be able to get creative and set a policy such that if they authenticaiton through the network device group of this SA APs that they only need to authenticate but do not force posture.

thanks,

Tarik Admani
*Please rate helpful posts*