topic Network Device IP has changed but logs are showing old IP address !!! in Network Access Control

Network Device IP has changed but logs are showing old IP address !!!

Beacon — Fri, 25 Aug 2023 11:20:41 GMT

Hello,

I have moved one switch from one site to another site so changing the site IP address accordingly.

Old IP: 10.10.100.10

New IP: 10.20.100.20

After changing the IP address to the new IP address, I see in the logs that Device IP is still the same. Hence, the login to the switch is not getting authenticated.

Is this okay for ISE to behave like this?

Is there any time interval that ISE cleared the buffer?

I have deleted the Network Device and added again with the fresh new IP address but still it is picking the old IP address seen in the logs.

what is the solution ?

Note: Policy and Authorization are the same for all the sites. So, no change is required in policy set.

Regards,

Re: Network Device IP has changed but logs are showing old IP address

balaji.bandi — Fri, 25 Aug 2023 11:34:24 GMT

that is bizzard if the IP changed and device sending own IP as new there no reason ISE should be seeing the old IP.

what Version of ISE ? can you post sample logs - is the IP in the log or device name ?

Re: Network Device IP has changed but logs are showing old IP address

Beacon — Fri, 25 Aug 2023 12:03:39 GMT

I have seen the request coming from the switch but IP was still the old. Though the IP on the switch and in the Network Device was the new IP.

Re: Network Device IP has changed but logs are showing old IP address

Beacon — Fri, 25 Aug 2023 12:01:37 GMT

ISE version: 2.7 patch 3.5

Its 4 days old logs. I cannot see now Or Can I ?

Re: Network Device IP has changed but logs are showing old IP address

hslai — Fri, 01 Sep 2023 03:12:35 GMT

@Beacon Assuming you've taken a packet capture and confirmed that the network device sending the requests with the old IP address, then please consult with the support team for the network device.