topic Re: Cisco ISE and FortiWLC IP Addresses not Displaying in Logs in Network Access Control

Cisco ISE and FortiWLC IP Addresses not Displaying in Logs

colbysunday — Wed, 04 May 2022 16:54:44 GMT

No IP addresses are showing when configuring ISE as RADIUS server for FortiWLC. Has anyone seen something similar? Also, would be great if someone is able to verify the vendor attributes for Meru/Fortinet WLC. Thanks.

Re: Cisco ISE and FortiWLC IP Addresses not Displaying in Logs

ahollifield — Wed, 04 May 2022 17:47:10 GMT

Does the FortiWLC support RADIUS Accounting? If so, is it configured to send Accounting to ISE? Do you also have a Fortinet/Meru RADIUS dictionaries installed?

Re: Cisco ISE and FortiWLC IP Addresses not Displaying in Logs

Arne Bier — Wed, 04 May 2022 21:29:29 GMT

@colbysunday - if the Fortinet NAS doesn't send this via RADIUS accounting then perhaps you can inform ISE via DHCP discovery probing. This assumes that the wireless clients use DHCP, and that the L3 gateway for the subnet can send a copy of the DHCP discovery to ISE (e.g. in the Cisco switch world, that would be the ip helper command). Then also, ISE would have to be configured for profiling (DHCP probe enabled). But perhaps all these components are in place ?

Re: Cisco ISE and FortiWLC IP Addresses not Displaying in Logs

colbysunday — Thu, 05 May 2022 12:35:22 GMT

Yes. These configurations are already in place.

Re: Cisco ISE and FortiWLC IP Addresses not Displaying in Logs

colbysunday — Thu, 05 May 2022 15:40:24 GMT

Documentation says it does and I have it configured on FortiWLC. I am looking for more information on Fortinet/Meru RADIUS dictionaries.

Re: Cisco ISE and FortiWLC IP Addresses not Displaying in Logs

ahollifield — Thu, 05 May 2022 15:54:10 GMT

https://www.network-node.com/blog/2018/11/10/vendor-specific-dictionaries-for-ise

Re: Cisco ISE and FortiWLC IP Addresses not Displaying in Logs

colbysunday — Thu, 05 May 2022 16:38:27 GMT

Let's see if the Fortinet dictionary adds any value. Thanks.