topic ISE - Computer name change gets computer disconnected in Network Access Control

ISE - Computer name change gets computer disconnected

Melghafri — Mon, 11 Mar 2019 07:09:56 GMT

Hi,

Anyone can explain what happens here?

We are running ISE with EAP-FAST machine&user authentication.

while machine A is connected to uncontrolled port (no dot1x) and machine B is connected to controlled port (dot1x) and then we change the computer name the following will happen:

-machine A will become busy for a while ... and then a pop-up will ask to reboot.... before computer gets rebooted if we search in AD for the new computer name we will find it.

-machine B will become busy for a while ... and then a pop-up will ask to reboot... before computer gets rebooted if we search in AD for the new computer name we will NOT find it.

This only means that ISE/AnyConnect are doing something BEFORE the reboot.

Does anybody know what happens?

Hi there, quick question: Are

nspasov — Fri, 21 Oct 2016 01:31:02 GMT

Hi there, quick question: Are you running your ports in closed or Low-Impact mode?

Thank you for rating helpful posts!

Thanks Neno Low-impact mode

Melghafri — Fri, 21 Oct 2016 04:12:37 GMT

Thanks Neno

Low-impact mode

Hmm, if your pre-auth ACL is

nspasov — Fri, 21 Oct 2016 18:13:03 GMT

Hmm, if your pre-auth ACL is configured properly so the machine can talk to AD then this should work fine. If your ACL is fine I would suggest you check with TAC...unless someone else has an idea here.

Thank you for rating helpful posts!