topic DNAC to ISE Integration in Network Access Control

DNAC to ISE Integration

M Talha — Fri, 30 Aug 2024 19:28:09 GMT

Hi All,

I am integrating DNAC with ISE for external authentication and has setup all the policy and TACACS AVPair for Super admin, Network Admin and Observer but still unable to login vi active directory user credentials. On DNAC under system 360 i can see external auth servers show green checks showing connected and active, but on the ISE node under PXGRID shows offline (XMPP). I tried removing pxgrid and adding it again from DNAC but still it shows same behavior as offline.

Regards,

Talha

Re: DNAC to ISE Integration

Flavio Miranda — Fri, 30 Aug 2024 19:55:11 GMT

@M Talha

This video can be helpful for you.

https://www.youtube.com/watch?v=dKy9SYo0LvA

Re: DNAC to ISE Integration

Ben Walters — Wed, 04 Sep 2024 15:58:27 GMT

When you try logging in what do the logs in ISE say? Are you getting a success in ISE but not being allowed to log in to DNAC?

I had a similar issue and I ended up having to create a new Authz profile specifically for DNAC, we have our main Authz profile that has several AVPair attributes that work for various devices but DNAC denied access when any other AVPair attributes were present in the Authz response.

our DNAC specific profile looks like this

Outside of that it is set up like any other network device we have.