topic Re: ISE Question (Eduroam) in Network Access Control

ISE Question (Eduroam)

benolyndav — Wed, 09 Feb 2022 19:23:22 GMT

We have a policy on ISE which use external radius servers the requests come to ISE but I'm convinced ISE isnt forwarding the Radius to the External radius Servers via the Raidius Server sequence, what is the best way to confirm this please.??

Thanks

Re: ISE Question (Eduroam)

Rob Ingram — Wed, 09 Feb 2022 19:54:20 GMT

@benolyndav the Eduroam servers are setup as Radius Proxy servers?

For troubleshooting you can run tcpdump packet capture on the ISE server, just filter on the IP address of the Eduroam server to confirm communication.

Re: ISE Question (Eduroam)

benolyndav — Wed, 09 Feb 2022 20:02:11 GMT

Hi Rob
Should Promiscuous mode be on or off.?

Thanks

Re: ISE Question (Eduroam)

Rob Ingram — Wed, 09 Feb 2022 20:06:04 GMT

Hi @benolyndav No, on ISE GUI you just go to Diagnostic Tools > Tcpdump and apply the filter. Screenshot from ISE 3.0, from memory on 2.x versions it looks different.

Re: ISE Question (Eduroam)

balaji.bandi — Wed, 09 Feb 2022 20:07:01 GMT

External means out of the network (internet), you need to check the logs too.