topic Re: ISE BYOD Single SSID issue with iOS 12.3 in Network Access Control

ISE BYOD Single SSID issue with iOS 12.3

smano — Thu, 27 Jun 2019 04:20:25 GMT

I am trying single SSID BYOD test with iPhone 12.3.1 at customer site for POC. The device gets stuck in PEAP after provisioning. If i manually kick the client off the WLC, it reconnects correctly with TLS. We have tried with WLC 8.2 and 8.8, ISE 2.3 patch 6. The client hits EAP_TLS policy after 5 mins. We would like to see the device gets switch to TLS method as soon as BYOD registration is done. Do anyone had experienced it?

Re: ISE BYOD Single SSID issue with iOS 12.3

Jason Kunst — Thu, 27 Jun 2019 04:28:32 GMT

Yes there is a bug for this from Apple side not switching the method. I will get this tomorrow.

Re: ISE BYOD Single SSID issue with iOS 12.3

howon — Thu, 27 Jun 2019 04:48:21 GMT

Yes known issue:

https://community.cisco.com/t5/security-documents/ise-byod-endpoint-notes/ta-p/3857246#toc-hId-1923889969

Re: ISE BYOD Single SSID issue with iOS 12.3

smano — Thu, 27 Jun 2019 12:27:56 GMT

Thank you @howon and @Jason Kunst

Re: ISE BYOD Single SSID issue with iOS 12.3

smano — Thu, 27 Jun 2019 19:39:09 GMT

Hi Jason,

By any chance do we know whats the ETA for this bug fix?

Re: ISE BYOD Single SSID issue with iOS 12.3

Jason Kunst — Thu, 27 Jun 2019 19:54:23 GMT

This is an apple issue, we have no control over this, please follow through and attach to TAC case for the defect on that page. I updated them all