topic cisco ise 1.4 checking authentication via CLI in Network Access Control

cisco ise 1.4 checking authentication via CLI

Pete C — Thu, 10 Jun 2021 12:48:17 GMT

i have migrated all NADs from cisco ise 1.4 to 2.7. Because flash is blocked on web browser i am unable to check cisco ise 1.4 to confirm nothing is left trying to authenticate against it.

is there any way via CLI to confirm there are no devices trying to use 1.4 server to authenticate against

thanks

Re: cisco ise 1.4 checking authentication via CLI

Peter Koltl — Thu, 10 Jun 2021 21:25:45 GMT

Apply an ACL in the network and check the hit count.

Re: cisco ise 1.4 checking authentication via CLI

hslai — Sat, 12 Jun 2021 01:59:42 GMT

Passed Authentications does not log to local store, by default, so you may enable it by going to ISE Admin web UI > Administration > System > Logging Categories > AAA Audit > Passed Authentications.

Once enabled, you may check localStore.log in ISE admin CLI as below or download the file(s).

term len 0
show logging app localStore/iseLocalStore.log