topic Re: ISE3.0 logs doesnt show client IP Address in Network Access Control

ISE3.0 logs doesnt show client IP Address

osman869 — Thu, 03 Mar 2022 12:07:59 GMT

For ise 3.0 i have tried with multiple users wired/wirless my endpoints are getting the IP address but its not shown on the ISE Logs.

Any idea?

Re: ISE3.0 logs doesnt show client IP Address

balaji.bandi — Thu, 03 Mar 2022 12:13:04 GMT

is that worked before ? or new setup ?

what end device (i mean switch, what config ?)

Where are you looking, Look at the Live logs ?

Re: ISE3.0 logs doesnt show client IP Address

Rob Ingram — Thu, 03 Mar 2022 12:16:56 GMT

@osman869 do you have device tracking enabled?

https://community.cisco.com/t5/security-documents/ise-secure-wired-access-prescriptive-deployment-guide/ta-p/3641515

Re: ISE3.0 logs doesnt show client IP Address

osman869 — Thu, 03 Mar 2022 12:34:24 GMT

I have tried on the Wireless the End Point is HP Laptop (I can see the IP address on the device but on the Radiud Live Logs, IP field is empty)

The same case is with host based authentication its in the right vlan got the IP as well but logs, no ip infoemtion.

Re: ISE3.0 logs doesnt show client IP Address

balaji.bandi — Thu, 03 Mar 2022 12:45:41 GMT

check the probe :

https://community.cisco.com/t5/network-access-control/ip-address-is-empty-in-live-sessions-of-ise/td-p/4489405

Re: ISE3.0 logs doesnt show client IP Address

Arne Bier — Thu, 03 Mar 2022 21:23:04 GMT

The IP address is always blank for RADIUS CoA (Change of Authorization). But when doing NAC on a Cisco switch you should always enabled Device Tracking. And while you're at it, enable the Cisco Device Sensor feature to send DHCP/CDP/LLDP/HTTP data to ISE to learn more about the endpoint. Caution: for DHCP profiling to work, you need to also enable DHCP Snooping on the switch! Now you're getting into profiling and this of course needs the ISE 3.x Advantage or ISE 2.x Plus licenses.