topic Re: Link status command on ISE2.4 in Network Access Control

Link status command on ISE2.4

masyamad — Fri, 12 Oct 2018 07:06:22 GMT

Sorry for the quick question. But now I can't find ISE command to check interface link status.

For example, now eth1(gigabitEthernet 1) stays admin:up, link status:down

C:\>snmpwalk -c ro -v 2c 192.168.10.1 1.3.6.1.2.1.2.2.1.2.3
IF-MIB::ifDescr.3 = STRING: eth1
C:\>snmpwalk -c ro -v 2c 192.168.10.1 1.3.6.1.2.1.2.2.1.7.3
IF-MIB::ifAdminStatus.3 = INTEGER: up(1)
C:\>snmpwalk -c ro -v 2c 192.168.10.1 1.3.6.1.2.1.2.2.1.8.3
IF-MIB::ifOperStatus.3 = INTEGER: down(2)

In the situation, "show interface" still shows the interface is UP.

ISE/admin# show interface gigabitEthernet 1
GigabitEthernet 1
flags=4099<UP,BROADCAST,MULTICAST> mtu 1500
inet 192.168.11.1 netmask 255.255.255.0 broadcast 192.168.11.255

Does anyone know good command to check the link status(ifOperStatus) on ISE?

Re: Link status command on ISE2.4

Damien Miller — Fri, 12 Oct 2018 16:05:17 GMT

I just walked a 2.4 node and those mibs indicate up/up for the loopback, and gigabit0 (eth0) which are the only active interfaces.

.1.3.6.1.2.1.2.2.1.2.1 = STRING: "lo"
.1.3.6.1.2.1.2.2.1.2.2 = STRING: "eth0"
.1.3.6.1.2.1.2.2.1.2.3 = STRING: "eth1"
.1.3.6.1.2.1.2.2.1.2.4 = STRING: "eth2"
.1.3.6.1.2.1.2.2.1.2.5 = STRING: "eth3"

.1.3.6.1.2.1.2.2.1.7.1 = INTEGER: 1
.1.3.6.1.2.1.2.2.1.7.2 = INTEGER: 1
.1.3.6.1.2.1.2.2.1.7.3 = INTEGER: 2
.1.3.6.1.2.1.2.2.1.7.4 = INTEGER: 2
.1.3.6.1.2.1.2.2.1.7.5 = INTEGER: 2

.1.3.6.1.2.1.2.2.1.8.1 = INTEGER: 1
.1.3.6.1.2.1.2.2.1.8.2 = INTEGER: 1
.1.3.6.1.2.1.2.2.1.8.3 = INTEGER: 2
.1.3.6.1.2.1.2.2.1.8.4 = INTEGER: 2
.1.3.6.1.2.1.2.2.1.8.5 = INTEGER: 2

Re: Link status command on ISE2.4

masyamad — Sun, 14 Oct 2018 16:38:33 GMT

Yes, SNMP query shows both admin and link status but now "show int" seems to show only admin status.

So I'd like to know if other useful way to show the link status on ISE unit (by CLI command or GUI menu)

Re: Link status command on ISE2.4

hslai — Thu, 25 Oct 2018 15:02:12 GMT

On ISE VM, I often see the output of "show interface" not reliable. Since you are able to good results via SNMP, that would be the way to go.