https://community.cisco.com/t5/network-access-control/nad-using-wrong-ise-for-dacl/m-p/2859310#M40358 <P>Hi everyone,</P> <P></P> <P>We have recently upgraded our ISE infrastructure, we did this by cloning the servers. These clones had their deployment broken, IP changed, name changed, upgraded and then joined together as a distributed deployment (2 Admin/Monitoring, 2 Policy Nodes). Our 3850 access switches then had the target group for authentication changed to the upgraded deployment.</P> <P></P> <P>We are seeing that these switches are still downloading the DACL defined in the authorization profile from the old ISE servers. Has anyone seen this before or have any ideas?</P> <P>Thanks,</P> <P>Mark</P> Mon, 11 Mar 2019 06:29:55 GMT Mark H 2019-03-11T06:29:55Z https://community.cisco.com/t5/network-access-control/nad-using-wrong-ise-for-dacl/m-p/2859310#M40358 <P>Hi everyone,</P> <P></P> <P>We have recently upgraded our ISE infrastructure, we did this by cloning the servers. These clones had their deployment broken, IP changed, name changed, upgraded and then joined together as a distributed deployment (2 Admin/Monitoring, 2 Policy Nodes). Our 3850 access switches then had the target group for authentication changed to the upgraded deployment.</P> <P></P> <P>We are seeing that these switches are still downloading the DACL defined in the authorization profile from the old ISE servers. Has anyone seen this before or have any ideas?</P> <P>Thanks,</P> <P>Mark</P> Mon, 11 Mar 2019 06:29:55 GMT https://community.cisco.com/t5/network-access-control/nad-using-wrong-ise-for-dacl/m-p/2859310#M40358 Mark H 2019-03-11T06:29:55Z