topic Re: ISE Posture status pending with assigned APIPA address at client p in Network Access Control

ISE Posture status pending with assigned APIPA address at client pc

journey jane — Thu, 29 Dec 2022 09:28:02 GMT

Dear all,

I would like to ask some helps for my facing ise posture issue. Posture state is pending and pc and get only APIPA address. When i trouble shoot, i have DC_Unknown authorization profile by attaching DACL name = Test_RD1. That Test_RD1 have the following access-list as screenshot. When i delete ""Deny ip any any"" at Test_RD1, posture flow is completed and working fine. Actually, it was working fine before without removing ""Deny ip any any"" at DACL. I have no changes before facing this posture issue.

NOTE: user switch model >> C2960X and firmware version is 15.2(2)E6.

Could anyone pls suggest to get the cause? how related with it? Thanks much.

Re: ISE Posture status pending with assigned APIPA address at client p

Rodrigo Diaz — Fri, 30 Dec 2022 23:16:54 GMT

hello @journey jane , are you using a posture based redirection flow ? or redirection-less ?

Re: ISE Posture status pending with assigned APIPA address at client p

journey jane — Sat, 07 Jan 2023 03:39:35 GMT

Hello everyone,

Thanks alot. As i checked with TAC, they remove DACL and issue was resolved but that was not the cause and tac also cannot find out the cause as well. They just suggest not to put all of the postures and radius policy to a policy set and to do segregation for each.