topic Re: ISE 3.0 CoA for RFC 3576 supported devices in Network Access Control

ISE 3.0 CoA for RFC 3576 supported devices

old roo — Tue, 07 Sep 2021 19:10:53 GMT

We are rolling out ISE currently and i have noticed the CoA errors in the dashboard.

Upon investigation i have noticed ISE is trying to talk to the RFC 3576 compliant devices using the newer standard.

I created a new device profile and set the CoA to Radius, and use the ports per RFC 3576. I basically want the devices to reauth if there is a CoA request.

Is there any additional configuration required for:

Port Bounce

Port Shutdown

Re Auth

Rerun

Last

or do i assume with the configuration above ISE knows what to send because the device conforms to the RFC ?

Re: ISE 3.0 CoA for RFC 3576 supported devices

howon — Tue, 07 Sep 2021 21:17:10 GMT

Yes, that will work. By the way, what kind of devices are you trying to support?

Re: ISE 3.0 CoA for RFC 3576 supported devices

old roo — Tue, 07 Sep 2021 22:36:01 GMT

they are alcatel 6860 switches.

Re: ISE 3.0 CoA for RFC 3576 supported devices

Greg Gibbs — Wed, 08 Sep 2021 01:54:14 GMT

If you have a working NAD Profile for those switches, please share for others on the Community as per ISE Third-Party NAD Profiles and Configs

Re: ISE 3.0 CoA for RFC 3576 supported devices

old roo — Wed, 08 Sep 2021 02:26:22 GMT

yep sure once it is working 🙂

I have TACACS, dot1x and MAB working at the moment, just trying to get CoA functional.

Re: ISE 3.0 CoA for RFC 3576 supported devices

antonioromao — Thu, 02 Dec 2021 15:13:16 GMT

Hi,

Did you get it to work?

Txs,

Antonio

Re: ISE 3.0 CoA for RFC 3576 supported devices

lilimtzrmz — Thu, 29 Feb 2024 21:30:22 GMT

Could you please share the configuration?