topic Re: Context Visibility Wizard Info in Network Access Control

Context Visibility Wizard Info

scamarda — Tue, 05 Feb 2019 00:38:56 GMT

Can you tell me what info the Visibility Wizard collects from SNMP? I believe it collects MAC address and ARP table information. Does it collect CDP and LLDP information as well? What other data does it pull from SNMP?

Thanks.

Sam

Re: Context Visibility Wizard Info

Mohammed al Baqari — Tue, 05 Feb 2019 03:27:44 GMT

Its a surprise that the question is coming from Cisco employee, but the
answer is in the description of the profiling problem in ISE.

quoted" This probe collects details from network devices such as Interface,
CDP, LLDP and ARP."

Re: Context Visibility Wizard Info

ldanny — Tue, 05 Feb 2019 08:21:12 GMT

Sam,

Let me just start by saying thank you for your question , this provides others the insight to questions they might already have therefor everyone benefits from it.

This forum is intended for just these kind of questions and it doesn't matter whether your Cisco or non-Cisco , we all know that being a Cisco employee does not mean you know every single Cisco product unless you were Super Cisco :0)

But to your question:

Yes ISE collects LDP and LLDP information as well as much more.

The SNMP query probe queries NADs and not endpoints , to query the actual endpoint you would use NMAP.

The key attributes collected are:

Bridge, IP (ARP)
cdpCacheEntry (Wired only)
lldpLocalSystemData (Wired only)
lldpRemoteSystemsData (Wired only)
cLApEntry (WLC only)
cldcClientEntry (WLC only)

Other SNMP MIBs would be

IF-MIB
SNMPv2-MIB
IP-MIB
CISCO-CDP-MIB
CISCO-VTP-MIB
CISCO-STACK-MIB
BRIDGE-MIB
OLD-CISCO-INTERFACE-MIB
CISCO-LWAPP-AP-MIB
CISCO-LWAPP-DOT11-CLIENT-MIB
CISCO-AUTH-FRAMEWORK-MIB
EEE8021-PAE-MIB: RFC IEEE 802.1X
HOST-RESOURCES-MIB
LLDP-MIB

Hope this helps,

Re: Context Visibility Wizard Info

scamarda — Wed, 06 Feb 2019 00:11:22 GMT

Thanks for the detailed info. Much appreciated.

Regards.

Sam